CVE-2025-1905 SourceCodester Employee Management System employee.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-1905 SourceCodester Employee Management System employee.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-1905

The CVE-2025-1905 entry concerns SourceCodester Employee Management System 1.0. Affected component: employee.php, where manipulation of the Full Name parameter enables cross-site scripting. Impact described as remote exploit with other parameters possibly affected; existence of public exploit is ...

CVE-2025-1905: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

oa_system 注入漏洞

oasystem is an application system used by aaluoxiang individual developers for the daily operation and management of organizations, employees and managers. An injection vulnerability exists in oasystem version 1.0, which stems from the presence of a SQL injection problem...

SourceCodester Employee Management System 安全漏洞

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter Full Name that can...

PT-2025-9624

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0 Description A vulnerability was found in the SourceCodester Employee Management System, affecting an unknown part of the file employee.php. The manipulation of the Full Name argument leads ...

CVE-2025-1607

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

CVE-2025-1593

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

CVE-2025-1606 SourceCodester Best Employee Management System backups.php information disclosure

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

CVE-2025-1606 SourceCodester Best Employee Management System backups.php information disclosure

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

CVE-2025-1606: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been...

SourceCodester Best Employee Management System 访问控制错误漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. An access control error vulnerability exists in SourceCodester Best Employee Management System version 1.0. An attacker can exploit this vulnerability to disclose sensitive information...

CVE-2025-1607: Authorization Bypass Through User-Controlled Key

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salaryslip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated...

CVE-2025-1593

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

CVE-2025-1593

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

CVE-2025-1592

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

CVE-2025-1592

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...