CVE-2026-10624
SourceCodester Human Resource Management Employee View detailview.php resource injection
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
10th
A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the component Employee View Page. Such manipulation of the argument employeeid leads to improper control of resource identifiers. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
| CWE | CWE-99 |
| Vendor | sourcecodester |
| Product | human resource management |
| Published | Jun 2, 2026 |
| Last Updated | Jun 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for sourcecodester human resource management
Be the first to know when new medium vulnerabilities affecting sourcecodester human resource management are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
SourceCodester / Human Resource Management
1.0
References
vuldb.com: https://vuldb.com/vuln/367929 vuldb.com: https://vuldb.com/vuln/367929/cti vuldb.com: https://vuldb.com/cve/CVE-2026-10624 vuldb.com: https://vuldb.com/submit/829766 r4sh7n.medium.com: https://r4sh7n.medium.com/insecure-direct-object-reference-idor-vulnerability-in-employee-management-functionality-70df8ac5b1d3?postPublishedType=repub sourcecodester.com: https://www.sourcecodester.com/
Credits
🔍 r4sh7n (VulDB User)