CNNVD-202509-4074 Information
CNNVD ID
CNNVD-202509-4074
Related CVE
- CNNVD Published: 2025-09-26
Description (Chinese)
Tutorials Website Employee Management System是Tutorials Website公司的一个员工管理系统。 Tutorials Website Employee Management System存在授权问题漏洞，该漏洞源于文件/admin/all-applied-leave.php中HTTP请求处理组件存在授权不当，可能导致远程攻击。
Description (English)
Tutorias Website Employee Management System is an employee management system for Tutorias Website. Tutorias Website Employee Management System has a mandate gap, which stems from the improper authorization of HTTP requested components in document/admin/all-applied-leave.php, which could lead to a long-range attack.
Hazard Level
Medium
Vulnerability Type
授权问题
Affected Vendor
Tutorials Website
Published
2025-09-26
Last Modified
2026-02-24
References
https://drive.google.com/file/d/1N5ApKiYw-yKNhVERr4m3ruooiANgpFRo/view?usp=sharing https://vuldb.com/?ctiid.325969 https://vuldb.com/?id.325969 https://vuldb.com/?submit.657210 https://access.redhat.com/security/cve/cve-2025-11030
Share on: