CVE-2026-108972 in Human Resource Management System
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability was found in <a href="/product/sourcecodester:human_resource_management_system">SourceCodester Human Resource Management System 1.0</a>. Affected by this vulnerability is the function <code>session_start</code> of the file <em>controller/employee.php</em> of the component <em>Employee Endpoint</em>. The manipulation of the argument <em>role/pfimg/EmpId</em> results in improper authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.