CVE-2024-11214

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0

Description A critical issue has been found in the SourceCodester Best Employee Management System, affecting the file /admin/profile.php. The manipulation of the website image argument leads to unrestricted upload. This issue can be initiated remotely.

Recommendations For version 1.0, update to the latest release immediately to mitigate risks. As a temporary workaround, consider restricting access to the /admin/profile.php file until a patch is available. Avoid using the website image argument in the affected file until the issue is resolved.