42 matches found
EUVD-2023-1893
Malicious code in bioql PyPI...
CVE-2025-9476
A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /SuperadminDashboard/process/editemployeeprocess.php. Such manipulation of the argument employeefile201 leads to unrestricted upload. The attack...
CVE-2025-9475
A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /AdminDashboard/process/editemployeeprocess.php. This manipulation of the argument employeefile201 causes unrestricted upload. The attack may be...
CVE-2025-9475 SourceCodester Human Resource Information System editemployee_process.php unrestricted upload
A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /AdminDashboard/process/editemployeeprocess.php. This manipulation of the argument employeefile201 causes unrestricted upload. The attack may be...
CVE-2025-9475
CVE-2025-9475 affects SourceCodester Human Resource Information System v1.0. An issue in /Admin_Dashboard/process/editemployee_process.php allows manipulation of the employee_file201 argument, causing unrestricted file uploads. The vulnerability can be exploited remotely; the exploit has been pub...
PT-2025-34745
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Information System version 1.0 Description: A vulnerability exists in SourceCodester Human Resource Information System 1.0, specifically within an unknown functionality of the /Superadmin...
PT-2025-34743
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Information System version 1.0 Description: A flaw exists in SourceCodester Human Resource Information System 1.0 within an unknown functionality of the /Admin Dashboard/process/editemployee process.php file...
SourceCodester Human Resource Information System 安全漏洞
SourceCodester Human Resource Information System is an open source human resource information system from SourceCodester. A security vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a misbehavior of the parameter employee in the file...
CVE-2024-3414
A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...
SQL Injection Vulnerability in Human Resource Information Management System of Beijing Hongjing Century Software Co.
Beijing Hongjing Century Software Co., Ltd "Hongjing Software" has always been focusing on the field of human resources and talent management informatization, and has become a professional e-HR professional vendor in China. A SQL injection vulnerability exists in the human resources information...
CVE-2024-3413
A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/loginprocess.php. The manipulation of the argument hremail/hrpassword leads to sql injection. The attack can be initiat...
SQL Injection Vulnerability in Human Resource Information Management System of Beijing Hongjing Century Software Company Limited (CNVD-2024-43261)
Beijing Hongjing Century Software Co. A SQL injection vulnerability exists in the human resources information management system of Beijing Hongjing Century Software Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2024-3415
CVE-2024-3415 concerns SourceCodester Human Resource Information System 1.0. vulnerability in the file Superadmin_Dashboard/process/addbranches_process.php where manipulating the parameter branches_name enables cross-site scripting. The issue is exploitable remotely (no user interaction required)...
CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting
A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...
CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting
A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...
CVE-2024-3413 SourceCodester Human Resource Information System login_process.php sql injection
A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/loginprocess.php. The manipulation of the argument hremail/hrpassword leads to sql injection. The attack can be initiat...
CVE-2024-3413
CVE-2024-3413 affects SourceCodester Human Resource Information System v1.0, where an SQL injection exists in the file initialize/login_process.php, caused by manipulating the arguments hr_email and hr_password. The vulnerability is exploitable remotely and the exploit has been disclosed publicly...
Human Resource Information System 安全漏洞
Human Resource Information System is a human resource information system. A security vulnerability exists in version 1.0 of the SourceCodester Human Resource Information System, which results from an SQL injection vulnerability in the hremail/hrpassword parameters of the initialize/loginprocess.p...
Human Resource Information System 跨站脚本漏洞
Human Resource Information System is a human resource information system. A cross-site scripting vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a cross-site scripting vulnerability in the corporate name parameter of the...
PT-2024-25711 · Sourcecodester · Sourcecodester Human Resource Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Information System version 1.0 Description: A critical issue has been found in the initialize/login process.php file, where the manipulation of the hr email/hr password argument leads to sql injection. The attack...