EXPOSURES › CVE-2025-14285
CVE-2025-14285
HIGH
DETAIL
SourceNVD · cve
Published2025-12-09
CVSS7.3
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-14285 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.