CVE-2025-1160: fallo de gravedad media en SourceCodester Employee Management System
SourceCodester Employee Management System index.php default credentials
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.9%
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
SourceCodester · Employee Management SystemCVEs relacionadas — SourceCodester Employee Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2723MEDIUMSourceCodester Employee Management System eprocess.php sql injectionEPSS 1.1%CVE-2022-2724MEDIUMSourceCodester Employee Management System aprocess.php sql injectionEPSS 1.1%CVE-2024-1833MEDIUMSourceCodester Employee Management System login.php sql injectionEPSS 0.9%CVE-2022-2715MEDIUMSourceCodester Employee Management System eloginwel.php sql injectionEPSS 0.9%CVE-2024-1009HIGHSourceCodester Employee Management System login.php sql injectionEPSS 0.8%CVE-2024-1008MEDIUMSourceCodester Employee Management System Profile Page edit-photo.php unrestricted uploadEPSS 0.8%