PT-2026-45853 · Sourcecodester · Wp Human Resource Management

R4Sh7N · Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-10624

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the component Employee View Page. Such manipulation of the argument employeeid leads to improper control of resource identifiers. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Weakness Enumeration

CWE-99

Related Identifiers

CVE-2026-10624

Affected Products

Wp Human Resource Management

References · 7

• 🔥 https://r4sh7n.medium.com/insecure-direct-object-reference-idor-vulnerability-in-employee-management-functionality-70df8ac5b1d3?postPublishedType=repub · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10624 · Security Note
• https://vuldb.com/vuln/367929 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/submit/829766 · Note
• https://vuldb.com/vuln/367929/cti · Note
• https://vuldb.com/cve/CVE-2026-10624 · Note