CVE-2023-0641— Employee Leaves Management System 安全漏洞

PHPGurukul Employee Leaves Management System changepassword.php weak password

A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password requirements. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220021 was assigned to this vulnerability.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

弱口令要求

Employee Leaves Management System 安全漏洞

Employee Leaves Management System（ELMS,员工管理系统）是个人开发者的一个内部的员工管理系统 PHPGurukul Employee Leaves Management System 1.0版本存在安全漏洞，该漏洞源于在文件 changepassword.php 存在未知功能，参数 newpassword/confirmpassword存在弱密码。

N/A

N/A