All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-19987
MEDIUMpublished 2026-08-17 06:17 UTC · 1 day ago · modified 2026-08-17 16:16 UTC
6.9
CVSS / 10
// description
A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely.
// weaknesses (CWE)
- CWE-548
- CWE-552