SourceCodester Vulnerabilities and Affected Products
Vulnerabilities associated with Employee Records System.
Products
Clear product- Class and Exam Timetabling System40 vulnerabilities
- Best Salon Management System33 vulnerabilities
- Online Computer and Laptop Store30 vulnerabilities
- Pharmacy Sales and Inventory System30 vulnerabilities
- Online Eyewear Shop29 vulnerabilities
- Best House Rental Management System27 vulnerabilities
- Pet Grooming Management Software25 vulnerabilities
- Pizzafy Ecommerce System25 vulnerabilities
- Online Tours & Travels Management System24 vulnerabilities
- Kortex Lite Advocate Office Management System22 vulnerabilities
- Sales and Inventory System21 vulnerabilities
- Web-based Pharmacy Product Management System20 vulnerabilities
- Clinics Patient Management System19 vulnerabilities
- Prison Management System19 vulnerabilities
- Record Management System19 vulnerabilities
- best_house_rental_management_system18 vulnerabilities
- Employee Management System18 vulnerabilities
- Inventory Management System18 vulnerabilities
- Lost and Found Information System18 vulnerabilities
- Employee Task Management System17 vulnerabilities
- Engineers Online Portal17 vulnerabilities
- Simple Online Bidding System17 vulnerabilities
- Student Result Management System17 vulnerabilities
- AC Repair and Services System16 vulnerabilities
- computer_laboratory_management_system16 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-4462CRITICAL | Employee Records System v1.0 Arbitrary File Upload RCEEmployee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC. | CVSS9.3v4.0 | EPSS3.19% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |