一、 漏洞 CVE-2025-1607 基础信息
漏洞标题
SourceCodester Best Employee Management System salary_slip.php授权漏洞
来源：AIGC 神龙大模型
漏洞描述信息
在SourceCodester Best Employee Management System 1.0中发现了一个被归类为有问题的漏洞。该问题影响了文件/admin/salary_slip.php中某些未知的处理过程。对参数id的操纵可能导致授权绕过。攻击可能从远程发起。该漏洞的利用方法已经公开披露，可能会被利用。厂商已在此披露早期被联系，但未以任何方式作出回应。
来源：AIGC 神龙大模型
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
来源：AIGC 神龙大模型
漏洞类别
授权机制不正确
来源：AIGC 神龙大模型
漏洞标题
SourceCodester Best Employee Management System salary_slip.php authorization
来源：美国国家漏洞数据库 NVD
漏洞描述信息
A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salary_slip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
来源：美国国家漏洞数据库 NVD
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
来源：美国国家漏洞数据库 NVD
漏洞类别
通过用户控制密钥绕过授权机制
来源：美国国家漏洞数据库 NVD
二、漏洞 CVE-2025-1607 的公开POC
# POC 描述 源链接 神龙链接
三、漏洞 CVE-2025-1607 的情报信息

  • 标题： CVEproject/xiahao.webray.com.cn/Best-employee-management-system-unauthorized-access.md at main · xiahao90/CVEproject · GitHub -- 🔗来源链接

    标签： exploit

    CVEproject/xiahao.webray.com.cn/Best-employee-management-system-unauthorized-access.md at main · xiahao90/CVEproject · GitHub

  • 标题： Free Source Code Projects and Tutorials - sourcecodester.com -- 🔗来源链接

    标签： product

    Free Source Code Projects and Tutorials - sourcecodester.com

  • 标题： CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization -- 🔗来源链接

    标签： signature permissions-required

    CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

  • 标题： CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization -- 🔗来源链接

    标签： vdb-entry technical-description

    CVE-2025-1607 SourceCodester Best Employee Management System salary_slip.php authorization

  • 标题： Submit #498432: mayuri_k Best employee management system 1.0 Exposure of Access Control List Files to an Unauthorized Control -- 🔗来源链接

    标签： third-party-advisory

    Submit #498432: mayuri_k Best employee management system 1.0 Exposure of Access Control List Files to an Unauthorized Control
  • https://nvd.nist.gov/vuln/detail/CVE-2025-1607