rishb0/CVEs-Assigned

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-56254 ↗	Sep 2, 2025Tuesday, 2 September 2025, 12:15	4.3 MEDIUM	—
PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users.