CVE:CVE-2023-0641
CNNVD:CNNVD-202302-138
Employee Leaves Management System（ELMS,员工管理系统）是个人开发者的一个内部的员工管理系统
PHPGurukul Employee Leaves Management System 1.0版本存在安全漏洞，该漏洞源于在文件 changepassword.php 存在未知功能，参数 newpassword/confirmpassword存在弱密码。
solution:Upgrade employee_leaves_management_system_project employee_leaves_management_system to a higher version than 1.0,and avoid the version 1.0