PT-2025-6116 · Unknown · Sourcecodester Employee Management System

Jmx0Hxq · CVE-2025-1160 · Published 2025-02-10 · Updated 2025-02-11

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0

Description A critical issue affects some unknown functionality of the file index.php, where the manipulation of the username and password arguments leads to the use of default credentials. This issue can be exploited remotely.

Recommendations For SourceCodester Employee Management System version 1.0, consider changing the default credentials to custom, secure ones to mitigate the risk of exploitation. As a temporary workaround, restrict access to the index.php file until a more permanent solution is available.

Exploit

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2025-1160

Affected Products

Sourcecodester Employee Management System

References · 10

• 🔥 https://gist.github.com/jmx0hxq/0e9cde14b6e9190a7451cd72d7b23bfd · Exploit
• https://osv.dev/vulnerability/CVE-2025-1160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1160 · Security Note
• https://t.me/cvedetector/17610 · Telegram Post
• https://vuldb.com/?submit.493860 · Note
• https://vuldb.com/?id.295064 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.295064 · Note
• https://twitter.com/CVEnew/status/1889082026306797601 · Twitter Post
• https://t.me/latest_high_impact_cve/1811 · Telegram Post