What’s Vulnerable › Vulnerabilities

CVE-2024-0465: code-projects Employee Profile Management System download.php path traversal

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-12 · updated 2026-06-17
• Weakness: CWE-24

Description

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-250570 is the identifier assigned to this vulnerability.

Affected products

• code-projects Employee Profile Management System: 1.0

References

• https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM%20_FileRead.pdf
• https://vuldb.com/?ctiid.250570
• https://vuldb.com/?id.250570
• https://github.com/BxYQ/vul/blob/main/EMPLOYEE_PROFILE_MANAGEMENT_SYSTEM%20_FileRead.pdf
• https://vuldb.com/?ctiid.250570
• https://vuldb.com/?id.250570

Get alerted when CVE-2024-0465 or the next vulnerability affects your stack