CVE-2024-11214

Published November 14th, 2024

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher disclosure contains confusing vulnerability classes.

4l1y3vsul3ym4n/0day

A central repository for managing CVE requests and publishing security advisories on vulnerabilities found in various projects.

GitHub