PT-2026-73205 · Sourcecodester · Employee Management System
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Best Employee Management System version 1.0
Description
An issue exists in the
/assets/uploadImage/Profile/ file that allows remote attackers to cause information exposure through directory listing, which is a condition where a web server lists the contents of a directory when an index file is missing.Recommendations
Restrict access to the
/assets/uploadImage/Profile/ directory to prevent directory listing.Fix
Files Accessible to External Parties
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Employee Management System