CVEvulnerability
CVE-2026-10624
2.1 LOW
Official page ↗
- Status
- Deferred
- Published
- 2026-06-02
- Last modified
- 2026-07-22
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 2.1 LOW — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-99
Description
A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the component Employee View Page. Such manipulation of the argument employeeid leads to improper control of resource identifiers. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Related
Weakness · CWE (1)
- CWE-99 Improper Control of Resource Identifiers weakness
References
- https://r4sh7n.medium.com/insecure-direct-object-reference-idor-vulnerability-in-employee-management-functionality-70df8ac5b1d3?postPublishedType=repub r4sh7n.medium.com
- https://vuldb.com/cve/CVE-2026-10624 vuldb.com
- https://vuldb.com/submit/829766 vuldb.com
- https://vuldb.com/vuln/367929 vuldb.com
- https://vuldb.com/vuln/367929/cti vuldb.com
- https://www.sourcecodester.com/ www.sourcecodester.com