Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipulation of the argument id/token can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7117 A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipula… https://www.cve.org/CVERecord?id=CVE-2026-7117
Post summary
The text announces CVE‑2026‑7117, identifying a weakness in Employee Management System 1.0’s 370project/approve.php function, but provides no exploits, patches, or evidence of active attacks.
CVE-2026-7117 SQL Injection in Code-Projects Employee Management System 1.0 (Exploitation Reported) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7117
Post summary
CVE-2026-7117 is an SQL Injection vulnerability in Code-Projects Employee Management System 1.0 with active exploitation reported, but no PoC, exploit code, or patch details are provided.