Sherlock

10 CVEs across 4 Sherlock products. Browse Sherlock vulnerabilities, severities, and proof-of-concept exploits.

Sherlock products with known CVEs

ProductCVEs
Employee Management System5
Accounting System3
Gym Management System1
Online Fir System1
Sherlock CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-5035High7.32026-03-29A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /view_work.php of the component Parameter Handl…
CVE-2026-5034High7.32026-03-29A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /edit_costumer.php of the compon…
CVE-2026-5033High7.32026-03-29A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_costumer.php…
CVE-2024-25216Critical9.82024-02-14Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.
CVE-2024-25215Critical9.82024-02-14Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.
CVE-2024-25214Critical9.82024-02-14An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at…
CVE-2024-25213High7.22024-02-14Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php.
CVE-2024-25212High7.22024-02-14Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.
CVE-2024-0503Low3.52024-01-13A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercompl…
CVE-2023-37068Critical9.82023-08-09Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and poten…