4 matches found
CVE-2025-44185
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/changepass.php via the password parameter...
CVE-2025-44185
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/changepass.php via the password parameter...
CVE-2025-44185
creationtimestamp| type| source ---|---|--- 2025-05-15 14:35:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16519...
CVE-2025-44185
SourceCodester Best Employee Management System V1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/change_pass.php endpoint. The root cause is the lack of CSRF protections on the password parameter, which could allow an attacker to perform unauthorized password c...