3 matches found
CVE-2024-2394 SourceCodester Employee Management System add-admin.php unrestricted upload
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched...
CVE-2024-2394 SourceCodester Employee Management System add-admin.php unrestricted upload
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched...
CVE-2024-2394
SourceCodester Employee Management System 1.0 contains a vulnerability in the /Admin/add-admin.php file where manipulating the avatar parameter allows unrestricted file uploads. This could enable remote exploitation and is described as a critical issue in multiple sources (NVD, Red Hat, CVE recor...