CVE-2026-19987
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A vulnerability has been detected in SourceCodester Best Employee Management System 1.0 in file /assets/uploadImage/Profile/, which allows information exposure through directory listing. The attack can be launched remotely.
Risk Assessment
Information exposure through directory listing could allow an attacker to browse files in the directory, potentially leading to leakage of sensitive data or facilitating further attacks.
Recommendation
It is recommended to disable directory listing on the server and secure the upload directory against direct access.
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely.