Employee Records System File Upload Vulnerability Leading to Remote Code Execution

A file upload vulnerability allowing remote unauthenticated attackers to upload arbitrary files has been identified in Employee Records System version 1.0. This issue arises from the application's failure to implement proper server-side validation, particularly in the uploadID.php endpoint. Exploited files can be executed on the server.

Impact

Exploitation of this vulnerability allows for arbitrary file uploads, which can lead to remote code execution on the server.

Reproduction

To reproduce this vulnerability, send a POST request to the uploadID.php endpoint with a .php file disguised as an image (such as a PNG) using multipart/form-data. The uploaded file will be saved in the '/uploads/employees_ids/' directory, where it can be accessed and executed.