CVE-2025-10197

A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability is an unknown functionality of the file /templates/attestation/../../selfservice/lawresource/downlawbase. Performing manipulation of the argument ID results in sql injection...

CVE-2025-10197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability is an unknown functionality of the file /templates/attestation/../../selfservice/lawresource/downlawbase. Performing manipulation of the argument ID results in sql injection...

HJSoft HCM Human Resources Management System injection vulnerability

HJSoft HCM Human Resources Management System is a human resources management software developed by individual developers of China Hongjing HJSoft. A SQL injection vulnerability exists in HJSoft HCM Human Resources Management System 20250822 and earlier versions, which originates from the file...