Lucene search

K
MayurikBest Employee Management System

12 matches found

CVE
CVE
added 2025/02/24 12:15 a.m.63 views

CVE-2025-1606

A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disc...

7.5CVSS6.6AI score0.0006EPSS
CVE
CVE
added 2025/02/23 8:15 p.m.53 views

CVE-2025-1592

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assign_name/description lea...

6.1CVSS3.5AI score0.00031EPSS
CVE
CVE
added 2025/03/06 10:15 p.m.52 views

CVE-2025-2046

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS7.6AI score0.00055EPSS
CVE
CVE
added 2025/02/24 1:15 a.m.49 views

CVE-2025-1607

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salary_slip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated r...

5.3CVSS4.7AI score0.00014EPSS
CVE
CVE
added 2025/01/29 2:15 a.m.41 views

CVE-2025-0802

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/View_user.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The attac...

8.1CVSS7.4AI score0.00017EPSS
CVE
CVE
added 2024/11/14 4:15 p.m.37 views

CVE-2024-11213

A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /admin/edit_role.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit ...

7.2CVSS5.5AI score0.00075EPSS
CVE
CVE
added 2024/11/14 3:15 p.m.36 views

CVE-2024-11212

A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/fetch_product_details.php. The manipulation of the argument barcode leads to sql injection. The attack may...

8.8CVSS7AI score0.00074EPSS
CVE
CVE
added 2025/02/23 8:15 p.m.36 views

CVE-2025-1593

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /_hr_soft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to init...

9.8CVSS4.9AI score0.00038EPSS
CVE
CVE
added 2024/11/14 4:15 p.m.35 views

CVE-2024-11214

A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely....

7.2CVSS5.3AI score0.00163EPSS
CVE
CVE
added 2025/05/14 5:15 p.m.26 views

CVE-2025-44184

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.

4.8CVSS6.1AI score0.00046EPSS
CVE
CVE
added 2025/05/14 5:15 p.m.25 views

CVE-2025-44186

SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.

5.4CVSS7AI score0.00021EPSS
CVE
CVE
added 2025/05/15 3:16 p.m.22 views

CVE-2025-44185

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter.

5.4CVSS7.4AI score0.00021EPSS