PT-2025-4059 · Sourcecodester · Sourcecodester Best Employee Management System

Published 2025-01-29 · Updated 2025-08-02 · CVE-2025-0802

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0

Description A critical issue was found in the Administrative Endpoint component, specifically in the file /admin/View user.php, leading to improper access controls. The attack can be launched remotely. The issue has been publicly disclosed and may be exploited.

Recommendations SourceCodester Best Employee Management System version 1.0: Update the /admin/View user.php file to implement proper access controls, ensuring that remote attacks are mitigated. As a temporary workaround, consider restricting access to the /admin/View user.php file until the issue is resolved.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2025-0802

Affected Products

Sourcecodester Best Employee Management System

References · 13

• 🔥 https://github.com/theanm0l/VulnDB/blob/main/Improper%20Authorization.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-0802 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0802 · Vendor Advisory
• https://t.me/cvedetector/16668 · Telegram Post
• https://vuldb.com/?submit.485005 · Note
• https://t.me/latest_high_impact_cve/1781 · Telegram Post
• https://t.me/cvenotify/110548 · Telegram Post
• https://vuldb.com/?ctiid.293923 · Note
• https://sourcecodester.com · Note
• https://twitter.com/DarkWebInformer/status/1951759005770306041 · Twitter Post
• https://vuldb.com/?id.293923 · Note
• https://twitter.com/CVEnew/status/1884424345851683188 · Twitter Post
• https://t.me/cvenotify/108944 · Telegram Post