A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /_hr_soft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.296577 | Permissions Required VDB Entry |
| https://vuldb.com/?id.296577 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.505212 | VDB Entry Third Party Advisory |
| https://www.sourcecodester.com/ | Product |
Configurations
History
28 Feb 2025, 18:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mayurik:best_employee_management_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Mayurik best Employee Management System
Mayurik |
|
| References | () https://www.sourcecodester.com/ - Product | |
| References | () https://vuldb.com/?ctiid.296577 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.296577 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.505212 - VDB Entry, Third Party Advisory |
23 Feb 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-23 20:15
Updated : 2025-02-28 18:33
NVD link : CVE-2025-1593
Mitre link : CVE-2025-1593
JSON object : View
Products Affected
mayurik
- best_employee_management_system