VULNERABILITY INTELLIGENCE

CVE-2022-3496

CVSS score6.3 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2022-10-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access controls. The attack may be initiated remotely. The identifier VDB-210785 was assigned to this vulnerability.

Weakness classification

  • CWE-266: Incorrect Privilege Assignment

Primary references