Description
A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /_hr_soft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Best Employee Management System | 1.0 | — |
References
- VDB-296577 | SourceCodester Best Employee Management System Profile Picture unrestricted upload vdb-entry
- VDB-296577 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #505212 | SourceCodester Employee Management System Submitted November 3, 2024 - 02:56. Code Execution third-party-advisory
- https://www.sourcecodester.com/ product