Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Employee Records System Project Subscribe
Filtered by product Employee Records System
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-20183 1 Employee Records System Project 1 Employee Records System 2020-01-24 6.5 MEDIUM 7.2 HIGH
uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension.