A vulnerability was found in code-projects Employee Profile Management System 1.0. It has been declared as critical. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection.
This vulnerability is reported as CVE-2025-14285. The attack can be launched remotely. Moreover, an exploit is present.
