Filtered by vendor Employee Records System Project
Subscribe
Filtered by product Employee Records System
Subscribe
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2019-20183 | 1 Employee Records System Project | 1 Employee Records System | 2024-02-28 | 6.5 MEDIUM | 7.2 HIGH |
uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension. |