CVE-2022-3496CWE-266

SourceCodester Human Resource Management System Admin Panel employeeadd.php access control

Medium · published October 14, 2022

CVSS v3.1
6.3
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access controls. The attack may be initiated remotely. The identifier VDB-210785 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2022-10-14T00:00Z
EPSS history
Timeline
  • 14 OCT 00:00Z
    SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
    cvelistv5