Vulnerability · Published Jun 2, 2026 · Assigned by VulDB

CVE-2026-10624SourceCodester Human Resource Management Employee View detailview.php resource injection

Medium 4.3

In plain English

A medium-severity security flaw in Human Resource Management from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 84.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the component Employee View Page. Such manipulation of the argument employeeid leads to improper control of resource identifiers. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Human Resource Management	1.0

Weakness: CWE-99 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

References

VDB-367929 | SourceCodester Human Resource Management Employee View detailview.php resource injection vdb-entry, technical-description
VDB-367929 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-10624 | CVE Analysis and Report third-party-advisory
Submit #829766 | SourceCodester Human Resource Management 1.0 Insecure Direct Object Reference third-party-advisory
https://r4sh7n.medium.com/insecure-direct-object-reference-idor-vulnerability-in-employee-management-functionality-70df8ac5b1d3?postPublishedType=repub broken-link, exploit
https://www.sourcecodester.com/ product