Employee Leave Management System

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-67315 Jan 05, 16:15 MEDIUM POC This Month

Employee Leave Management System versions up to 2.1 is affected by cross-site request forgery (csrf) (CVSS 5.4).

PHP Employee Leave Management System Phpgurukul

NVD GitHub

CVSS 3.1

5.4

EPSS

0.1%

CVE-2025-56254 Sep 02, 12:15 MEDIUM Monitor

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Authentication Bypass Employee Leave Management System Phpgurukul

NVD GitHub

CVSS 3.1

4.3

EPSS

0.0%

CVE-2025-67315

EPSS 0% CVSS 5.4

MEDIUM POC This Month

Employee Leave Management System versions up to 2.1 is affected by cross-site request forgery (csrf) (CVSS 5.4).

PHP Employee Leave Management System Phpgurukul

NVD GitHub

CVE-2025-56254

EPSS 0% CVSS 4.3

MEDIUM Monitor

PHP Authentication Bypass Employee Leave Management System +1

NVD GitHub