CVE-2026-5576

MediumCVSS 4.7

Published: 05/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

SourceCodester/jkev Record Management System 1.0 allows unrestricted file upload via save_emp.php on the Add Employee page. Remote exploitation is possible and the exploit is public.

Risk Assessment

An attacker can upload a malicious file (e.g., script) that may be executed on the server, leading to compromise.

Recommendation

Implement restrictions on file types and sizes, and update the system.

Other vulnerabilities in SourceCodester/jkev Record Management System

CVE-2026-5575High
In SourceCodester/jkev Record Management System 1.0, the index.php file in the Login component is vulnerable to SQL injection via the Username argument. Remote exploitation is possible and the exploit is public.

Original NVD description (English source)

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file save_emp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.