Back to Database
Status published
Medium
CVE-2022-3496
SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
Vulnerability Description
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access controls. The attack may be initiated remotely. The identifier VDB-210785 was assigned to this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-3496
Credits & Attribution
No credits recorded in the NVD database.
References
More from SourceCodester
View All →CVE-2025-9833
SourceCodester Online Farm Management System login.php sql injection
Medium
6.9
CVE-2025-9832
SourceCodester Food Ordering Management System register-router.php sql injection
Medium
6.9
CVE-2025-9790
SourceCodester Hotel Reservation System updateabout.php sql injection
Medium
6.9
CVE-2025-9789
SourceCodester Online Hotel Reservation System edituser.php sql injection
Medium
6.9
CVE-2025-9788
SourceCodester/Campcodes School Log Management System admin_class.php sql injection
Medium
6.9
Affected Vendor
SourceCodester
View all reports →Affected Software
Human Resource Management System
Vulnerable Versions:
1.0
Timeline
Official Publish:
October 14th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L