A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
References
| Link | Resource |
|---|---|
| https://github.com/sorcha-l/cve/blob/main/Employee%20Management%20System%20by%20rems%20has%20xss.md | Exploit |
| https://github.com/sorcha-l/cve/blob/main/Employee%20Management%20System%20by%20rems%20has%20xss.md | Exploit |
| https://vuldb.com/?ctiid.298425 | Permissions Required |
| https://vuldb.com/?id.298425 | Permissions Required |
| https://vuldb.com/?submit.508301 | Third Party Advisory |
| https://www.sourcecodester.com/ | Product |
Configurations
History
06 Mar 2025, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:remyandrade:employee_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?ctiid.298425 - Permissions Required | |
| References | () https://www.sourcecodester.com/ - Product | |
| References | () https://vuldb.com/?id.298425 - Permissions Required | |
| References | () https://vuldb.com/?submit.508301 - Third Party Advisory | |
| References | () https://github.com/sorcha-l/cve/blob/main/Employee%20Management%20System%20by%20rems%20has%20xss.md - Exploit | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Remyandrade employee Management System
Remyandrade |
04 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-79 |
04 Mar 2025, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-04 05:15
Updated : 2025-03-06 12:17
NVD link : CVE-2025-1905
Mitre link : CVE-2025-1905
JSON object : View
Products Affected
remyandrade
- employee_management_system
CWE
No CWE.