Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server.
References
Link | Resource |
---|---|
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/PHPGURUKUL/ANUJ%20KUMAR/Employee-Record-Management-System | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-12-13 07:15
Updated : 2021-12-16 17:35
NVD link : CVE-2021-44965
Mitre link : CVE-2021-44965
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
employee_record_management_system_project
- employee_record_management_system