CVE-2026-10624
MEDIUMSourceCodester Human Resource Management Employee View detailview.php resource injection
Title source: cnaDescription
A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the component Employee View Page. Such manipulation of the argument employeeid leads to improper control of resource identifiers. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
References (6)
Core 6
Core References
Vdb Entry, Technical Description vdb-entry
technical-description
VDB-367929 | SourceCodester Human Resource Management Employee View detailview.php resource injection
https://vuldb.com/vuln/367929
Signature, Permissions Required signature
permissions-required
VDB-367929 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/367929/cti
Third Party Advisory third-party-advisory
CVE-2026-10624 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-10624
Third Party Advisory third-party-advisory
Submit #829766 | SourceCodester Human Resource Management 1.0 Insecure Direct Object Reference
https://vuldb.com/submit/829766
Exploit broken-link
exploit
https://r4sh7n.medium.com/insecure-direct-object-reference-idor-vulnerability-in-employee-management-functionality-70df8ac5b1d3?postPublishedType=repub
Product product
https://www.sourcecodester.com/
Scores
CVSS v3
4.3
EPSS
0.0024
EPSS Percentile
15.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-99
Status
published
Products (1)
SourceCodester/Human Resource Management
1.0
Published
Jun 02, 2026
Tracked Since
Jun 03, 2026