CVE-2025-9475: SourceCodester Human Resource Information System editemployee_process.php unrestricted upload
A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /AdminDashboard/process/editemployeeprocess.php. This manipulation of the argument employeefile201 causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9475?
CVE-2025-9475 has not been assigned a specific severity rating, but it allows for unrestricted file uploads, which can pose significant security risks.
How do I fix CVE-2025-9475?
To mitigate CVE-2025-9475, restrict file upload functionality in the /Admin_Dashboard/process/editemployee_process.php file to allow only specific file types and implement proper validation checks.
What products are affected by CVE-2025-9475?
CVE-2025-9475 specifically affects SourceCodester Human Resource Information System version 1.0.
What kind of attack can be executed due to CVE-2025-9475?
CVE-2025-9475 could potentially allow attackers to upload malicious files, leading to code execution or data breaches.
When was CVE-2025-9475 reported?
CVE-2025-9475 was reported in 2025, though the exact date of discovery is not specified.