PT-2026-111284 · Sourcecodester · Human Resource Management System

Santhoshkumar

·

CVE-2026-108972

·

Publicado

2026-10-13

·

Atualizado

2026-10-13

CVSS v3.1

7.3

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session start of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Exploit

Correção

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2026-108972

Produtos afetados

Human Resource Management System