Employee Records System

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-4462	Employee Records System Employee Records System	Cri	0.64	9.8	0.03		Nov 10, 2025	Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper…
CVE-2019-20183	Employee Records System Employee Records System	Hig	0.47	7.2	0.08		Jan 9, 2020	uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension.

CVE-2021-4462CriNov 10, 2025
Employee Records System
Employee Records System
risk 0.64cvss 9.8epss 0.03
Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper…
CVE-2019-20183HigJan 9, 2020
Employee Records System
Employee Records System
risk 0.47cvss 7.2epss 0.08
uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension.