| Package | Affected versions | Patched versions |
|---|---|---|
| employee records system | = 1.0 |
uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free