Employee Leave Management System

2 CVEs product

Monthly

CVE-2025-67315 MEDIUM POC This Month

Employee Leave Management System versions up to 2.1 is affected by cross-site request forgery (csrf) (CVSS 5.4).

PHP Employee Leave Management System
NVD GitHub
CVSS 3.1
5.4
EPSS
0.1%
CVE-2025-56254 MEDIUM Monitor

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass PHP Employee Leave Management System
NVD GitHub
CVSS 3.1
4.3
EPSS
0.0%
EPSS 0% CVSS 5.4
MEDIUM POC This Month

Employee Leave Management System versions up to 2.1 is affected by cross-site request forgery (csrf) (CVSS 5.4).

PHP Employee Leave Management System
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM Monitor

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass PHP Employee Leave Management System
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy