CVE-2025-0802 - SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control

Back Back to CVE browser

MEDIUM

SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control

Published Jan 29, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.59%

Description

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/View_user.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor SourceCodester Product Best Employee Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Best Employee Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-284

References (5)

https://github.com/theanm0l/VulnDB/blob/main/Improper%20Authorization.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.293923
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.293923
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.485005
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.sourcecodester.com/
product

Link	Providers	Tags
https://github.com/theanm0l/VulnDB/blob/main/Improper%20Authorization.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.293923		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.293923		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.485005		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.sourcecodester.com/		product