Design/Logic Flaw

The employee management page of Flygo contains an Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attacker can manipulate the user data and then over-write another employee’s user data by specifying that employee’s ID in the API parameter...

CVE-2021-37215 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-4

The employee management page of Flygo contains an Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attacker can manipulate the user data and then over-write another employee’s user data by specifying that employee’s ID in the API parameter...

CVE-2021-37214

CVE-2021-37214 affects Flygo's employee management page. It is an Insecure Direct Object Reference (IDOR ) vulnerability allowing an authenticated general user to alter the employee ID parameter to access/modify other employees’ data, escalate to administrator privileges, and execute arbitrary co...

CVE-2021-37214 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-3

The employee management page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modify it, and then obtain administrator...

PT-2021-21579

Name of the Vulnerable Software and Affected Versions Flygo affected versions not specified Description The employee management page of Flygo contains an Insecure Direct Object Reference IDOR issue. After being authenticated as a general user, remote attackers can manipulate the employee ID in...

CVE-2021-37214: Use of Incorrectly-Resolved Name or Reference

The employee management page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modify it, and then obtain administrator...

CVE-2021-37215: Use of Incorrectly-Resolved Name or Reference

The employee management page of Flygo contains an Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attacker can manipulate the user data and then over-write another employee’s user data by specifying that employee’s ID in the API parameter...

PT-2021-21580

Name of the Vulnerable Software and Affected Versions Flygo affected versions not specified Description The employee management page of Flygo contains an Insecure Direct Object Reference IDOR issue. After being authenticated as a general user, a remote attacker can manipulate user data and then...

SourceCodester Employee Management System Cross-Site Scripting Vulnerability

SourceCodester Employee Management System is SourceCodester a php-based system for employee performance management . A cross-site scripting vulnerability exists in SourceCodester Employee Management System 1.0, which can be exploited to execute an alert message via /Employee Management...

CVE-2020-29215

A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account...

CVE-2020-29215

A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account...

Cross site scripting

A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account...

CVE-2020-29215

CVE-2020-29215 pertains to a Cross-Site Scripting vulnerability in SourceCodester Employee Management System 1.0. The affected component is the addemp.php endpoint under “Employee Management System,” exploitable on an administrator account to trigger alert messages. The source documents confirm t...

CVE-2020-29215

A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account...

CVE-2020-29215: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account...

PT-2021-11659 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A Cross Site Scripting issue allows users to execute alert messages via the "/Employee Management System/addemp.php" API endpoint on an admin account. Recommendations: For...

SourceCodester Employee Management System 跨站脚本漏洞

SourceCodester Employee Management System is SourceCodester a php-based system for employee performance management . A cross-site scripting vulnerability exists in SourceCodester Employee Management System 1.0, which can be exploited to execute an alert message via /Employee Management...

Employee Management System 1.0 SQL Injection

Exploit Title: Employee Management System 1.0 - Authentication Bypass Date: 2020-10-16 Exploit Author: Ankita Pal Vendor Homepage: https://www.sourcecodester.com/php/14432/employee-management-system-using-php.html Software Link:...

Employee Management System 1.0 Cross Site Scripting

Exploit Title: Employee Management System 1.0 - Stored Cross Site Scripting Date: 2020-10-16 Exploit Author: Ankita Pal Vendor Homepage: https://www.sourcecodester.com/php/14432/employee-management-system-using-php.html Software Link:...

Employee Management System 1.0 - Authentication Bypass

Exploit Title: Employee Management System 1.0 - Authentication Bypass Date: 2020-10-16 Exploit Author: Ankita Pal Vendor Homepage: https://www.sourcecodester.com/php/14432/employee-management-system-using-php.html Software Link:...