Vulnerabilities (CVE)

Filtered by vendor Phpgurukul Subscribe
Filtered by product Employee Leave Management System
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-56254 1 Phpgurukul 1 Employee Leave Management System 2025-09-04 N/A 4.3 MEDIUM
PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users.