CVE-2025-1160CWE-1392

SourceCodester Employee Management System index.php default credentials

Medium · published February 10, 2025

CVSS v4.0
6.9
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00934 · 60.4th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-02-10T22:31Z
EPSS history
Timeline
  • 10 FEB 22:31Z
    SourceCodester Employee Management System index.php default credentials
    cvelistv5