CVE-2025-1593

CVE-2025-1593 affects SourceCodester Best Employee Management System 1.0, specifically the Profile Picture Handler. The vulnerability resides in unrestricted file upload to the path /_hr_soft/assets/uploadImage/Profile/, allowing remote attackers to upload arbitrary files. The description consist...

CVE-2025-1593 SourceCodester Best Employee Management System Profile Picture unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

CVE-2025-1592 SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

CVE-2025-1592 SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

CVE-2025-1592

Summary: CVE-2025-1592 affects SourceCodester Best Employee Management System 1.0, specifically the Add Role Page’s /admin/Operations/Role.php. The issue arises from manipulating the assign_name/description parameters, causing cross-site scripting that can be triggered remotely. The primary sourc...

CVE-2025-1591

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1591

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1591

CVE-2025-1591 affects SourceCodester Employee Management System 1.0, specifically the Department Page component. The vulnerability resides in /department.php where manipulating the Department Name parameter leads to cross-site scripting. The attack is described as remote. Connected sources corrob...

CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1593: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

CVE-2025-1591: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1592: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

SourceCodester Best Employee Management System 代码问题漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A code issue vulnerability exists in SourceCodester Best Employee Management System version 1.0, which stems from a lack of restrictions in the upload process, resulting in arbitrary file...

SourceCodester Best Employee Management System 代码注入漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Employee Management System, which originates from cross-site scripting due to incorrect manipulation of the...

SourceCodester Employee Management System 代码注入漏洞

SourceCodester Employee Management System is SourceCodester open source a php-based for employee performance management system . A code injection vulnerability exists in version 1.0 of the SourceCodester Employee Management System, which originates from cross-site scripting due to incorrect...

PT-2025-7690

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0 Description A critical issue has been discovered, affecting the Profile Picture Handler component, specifically the file / hr soft/assets/uploadImage/Profile/. This issue allows for...

PT-2025-7672 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A vulnerability was found in the SourceCodester Best Employee Management System, affecting unknown code of the file /admin/backup/backups.php. This leads to information...

DOGE’s USDS Purge Included the Guy Who Keeps Veterans’ Data Safe Online

The cybersecurity lead for VA.gov was fired last week. He tells WIRED that the Veterans Affairs digital hub will be more vulnerable without someone in his role...

CVE-2024-56883

Sage DPW before 202412001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the...