Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.
CWE-89, CWE-89