CVE Catalog
CVE-2026-5576
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
SourceCodester/jkev Record Management System 1.0 allows unrestricted file upload via save_emp.php on the Add Employee page. Remote exploitation is possible and the exploit is public.
Risk Assessment
An attacker can upload a malicious file (e.g., script) that may be executed on the server, leading to compromise.
Recommendation
Implement restrictions on file types and sizes, and update the system.
Original NVD description (English source)
A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file save_emp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.