Sourcecodester · Sourcecodester Best Employee Management System · CVE-2025-1606
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Best Employee Management System version 1.0
**Description**
A vulnerability was found in the SourceCodester Best Employee Management System, affecting unknown code of the file /admin/backup/backups.php. This leads to information disclosure and can be initiated remotely. The exploit has been disclosed to the public, and the vendor was contacted but did not respond.
**Recommendations**
As a temporary workaround, consider disabling access to the /admin/backup/backups.php file until a patch is available.
Restrict access to the `backups.php` file to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.