CVE-2025-10197

CVE-2025-10197 concerns HJSoft HCM Human Resources Management System (up to 20250822). The vulnerability is a SQL injection in an unknown functionality of the file path /templates/attestation/../../selfservice/lawresource/downlawbase, triggered by manipulating the ID argument. Remote exploitation...