Critical severity9.8NVD Advisory· Published Mar 19, 2024· Updated Jun 17, 2026
CVE-2024-28595
CVE-2024-28595
Description
SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in update-admin.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:walterjnr1:employee_management_system:1.0:*:*:*:*:*:*:*
- Employee Management System/Employee Management Systemdescription
Patches
Vulnerability mechanics
References
1- github.com/shubham-s-pandey/CVE_POC/blob/main/CVE-2024-28595.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.