| tiêu đề | SourceCodester Best Employee Management System 1.0 Exposure of Information Through Directory Listing |
|---|
| Mô tả | A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as high. Affected by this issue is the /assets/uploadImage/Profile/ directory. Lack of access authentication allows unauthenticated remote attackers to access the directory directly, and the enabled directory listing function can be used to traverse upward to discover the website root path and leak all sensitive directory structures. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. |
|---|
| Nguồn | ⚠️ https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html |
|---|
| Người dùng | Lily1024 (UID 96344) |
|---|
| Đệ trình | 30/06/2026 11:29 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 16/08/2026 16:41 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 391191 [SourceCodester Best Employee Management System 1.0 Profile tiết lộ thông tin] |
|---|
| điểm | 20 |
|---|