CVE-2025-10197

A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability is an unknown functionality of the file /templates/attestation/../../selfservice/lawresource/downlawbase. Performing manipulation of the argument ID results in sql injection...

CVE-2025-10197

creationtimestamp| type| source ---|---|--- 2025-09-10 02:01:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyh5aif6n62m 2025-09-10 05:06:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyhhk7vdbt2t...

CVE-2025-10197

CVE-2025-10197 concerns HJSoft HCM Human Resources Management System (up to 20250822). The vulnerability is a SQL injection in an unknown functionality of the file path /templates/attestation/../../selfservice/lawresource/downlawbase, triggered by manipulating the ID argument. Remote exploitation...