CVE-2022-3458

A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /employeeview.php of the component Image File Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210559.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2022-10-12

Last modified

2024-08-03

Weaknesses

CWE-266, CWE-434

Affected products

• Human Resource Management System (Oretnom23)
• Human Resource Management System (Sourcecodester)

References

• https://vuldb.com/?id.210559