CVE-2024-48813

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-11 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the admin_id parameter of the /update-employee.php component.

Affected products

Employee Management System Project Employee Management System: 1.0

References

https://gitee.com/lssrain/taskmatic/issues/IAUXOL

Get alerted when CVE-2024-48813 or the next vulnerability affects your stack