CVE-2025-0802: SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control
Description
A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/View_user.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. In SourceCodester Best Employee Management System 1.0 wurde eine kritische Schwachstelle entdeckt. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /admin/View_user.php der Komponente Administrative Endpoint. Durch die Manipulation mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
Classification
CVE ID: CVE-2025-0802
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.9
Affected Products
Vendor: SourceCodester
Product: Best Employee Management System
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.18% (probability of being exploited)
EPSS Percentile: 55.66% (scored less or equal to compared to others)
EPSS Date: 2025-02-28 (when was this score calculated)
References
https://vuldb.com/?id.293923https://vuldb.com/?ctiid.293923
https://vuldb.com/?submit.485005
https://github.com/theanm0l/VulnDB/blob/main/Improper%20Authorization.md
https://www.sourcecodester.com/