SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication
CVE-2023-0905

7.5HIGH

Key Information:

Vendor: SourceCodester
Status: Employee Task Management System
Vendor: CVE Published:; 18 February 2023

🔔 Create SourceCodester Vulnerability Alert

What is CVE-2023-0905?

A vulnerability exists in the Employee Task Management System developed by SourceCodester, specifically within the functionality around changing employee passwords in the changePasswordForEmployee.php file. This flaw allows attackers to bypass authentication mechanisms, potentially leading to unauthorized access to sensitive employee data. The vulnerability can be exploited remotely, making it critical for organizations using this system to apply appropriate security measures to mitigate the risk. The details regarding this vulnerability have been publicly disclosed, raising concerns for those utilizing the affected versions of the software.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch