CVE-2024-25214: Sherlock Employee Management System

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.

Affected products

• Sherlock Employee Management System: version 1.0 only

Published 2024-02-14. Last modified 2026-06-17.