PT-2026-30445 · Sourcecodester+1 · Record Management System

Chenkh · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5576

Mitre

CVSS v3.1

4.7

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file save emp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-5576

Affected Products

Record Management System

References · 8

• 🔥 https://github.com/whatyourname12345/CVE/blob/main/PRMS/cve_Arbitrary%20File%20Upload%20to%20RCE.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5576 · Security Note
• https://vuldb.com/submit/783473 · Note
• https://twitter.com/infoflowcloud/status/2040820590710280705 · Twitter Post
• https://twitter.com/cyberbivash/status/2040829306742390878 · Twitter Post
• https://twitter.com/CVEnew/status/2040819209865699384 · Twitter Post
• https://vuldb.com/vuln/355346 · Note
• https://vuldb.com/vuln/355346/cti · Note