Employee Management System

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:employee_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductEmployee Management System (14b49078-180b-5a07-84f1-7356486dd45a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1905 vulnerable 2026-06-08 07:08:38.454450 SourceCodester Employee Management System employee.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-03-04T04:31:07.354Z
Updated: 2025-03-04T14:39:06.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1591 vulnerable 2026-06-08 07:08:37.358945 SourceCodester Employee Management System Department Page department.php cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross site scripting. The attack can be launched remotely.
Published: 2025-02-23T19:00:12.912Z
Updated: 2025-02-24T12:06:18.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1160 vulnerable 2026-06-08 07:06:37.056782 SourceCodester Employee Management System index.php default credentials
HIGH (7.3)
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-02-10T22:31:04.690Z
Updated: 2025-02-18T18:10:11.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9083 vulnerable 2026-06-08 07:00:26.624864 SourceCodester Employee Management System add-admin.php cross site scripting
LOW (2.4)
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file /Admin/add-admin.php. The manipulation of the argument txtfullname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-22T08:31:05.017Z
Updated: 2024-09-23T15:55:10.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2394 vulnerable 2026-06-08 06:33:31.007771 SourceCodester Employee Management System add-admin.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-256454 is the identifier assigned to this vulnerability.
Published: 2024-03-12T14:31:04.079Z
Updated: 2024-08-12T13:47:11.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1878 vulnerable 2026-06-08 06:27:14.806581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1877 vulnerable 2026-06-08 06:27:14.805839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1876 vulnerable 2026-06-08 06:27:14.805062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1871 vulnerable 2026-06-08 06:27:14.779092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1833 vulnerable 2026-06-08 06:27:14.646064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1011 vulnerable 2026-06-08 06:25:38.989635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1010 vulnerable 2026-06-08 06:25:38.988934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1009 vulnerable 2026-06-08 06:25:38.986649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1008 vulnerable 2026-06-08 06:25:38.986071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1007 vulnerable 2026-06-08 06:25:38.984263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2724 vulnerable 2026-06-08 05:43:36.075147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2723 vulnerable 2026-06-08 05:43:36.074826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2715 vulnerable 2026-06-08 05:43:36.065283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.