2 matches found
CVE-2025-13420: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manipulation of the argument eventSubject causes sql injection. The attack can be initiated remotely. The exploit has been ma...
9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
PT-2025-47538
Name of the Vulnerable Software and Affected Versions itsourcecode Human Resource Management System version 1.0 Description A flaw exists in itsourcecode Human Resource Management System 1.0 that allows for SQL injection. The issue stems from improper handling of the eventSubject argument during...
7.5CVSS7.5AI score0.00387EPSS
SaveExploits1References7
20