CVE-2024-2576

HIGH

SourceCodester Employee Task Management System 1.0 - Authorization Bypass via admin_id Parameter

Title source: llm

Description

A vulnerability, which was classified as critical, was found in SourceCodester Employee Task Management System 1.0. This affects an unknown part of the file /update-admin.php. The manipulation of the argument admin_id leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257079.

References (3)

Core 3

Core References

Permissions Required vdb-entry technical-description

https://vuldb.com/?id.257079

Permissions Required signature permissions-required

https://vuldb.com/?ctiid.257079

Broken Link exploit patch

https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20Employee%20Task%20Management%20System/IDOR%20-%20update-admin.php.md

Scores

CVSS v3 7.3

EPSS 0.0067

EPSS Percentile 47.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-639

Status published

Products (1)

oretnom23/employee_task_management_system 1.0

Published Mar 18, 2024

Tracked Since Feb 18, 2026