Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/09/02 6:35 p.m.•25 views

CVE-2025-9740

A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /logquery.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS7AI score0.00472EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/02 12:00 a.m.•20 views

Human Resource Integrated System log_query.php File SQL Injection Vulnerability

Human Resource Integrated System is a human resource management system. Human Resource Integrated System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of the file /logquery.php. An attacker can exploit...

9.8CVSS8.2AI score0.00472EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/31 6:15 p.m.•20 views

CVE-2025-9740

A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /logquery.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS5.7AI score0.00472EPSS
SaveExploits1References5
NVD
NVD
•added 2025/08/31 6:15 p.m.•18 views

CVE-2025-9740

A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /logquery.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS0.00472EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/31 12:00 a.m.•6 views

CVE-2025-9740: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /logquery.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rows per page
Query Builder