CVE-2024-0465 LOW

CVE-2024-0465: code-projects Employee Profile Management System download.php path traversal

Vendor Code-Projects
Product Employee Profile Management System
Weakness CWE-24
Published January 12, 2024
Last update June 16, 2025
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-250570 is the identifier assigned to this vulnerability.

Key dates

02Disclosure timeline

January 12, 2024 CVE published
June 16, 2025 Record updated