CVE-2024-0469

CVE-2024-0469 affects code-projects’ Human Resource Integrated System 1.0. The vulnerability exists in the file update_personal_info.php where manipulating the parameter sex enables a SQL injection. This is a remotely exploitable issue, with public disclosure of the exploit. Several connected sou...

CVE-2024-0470

CVE-2024-0470 affects code-projects Human Resource Integrated System 1.0. The vulnerability is in the /admin_route/inc_service_credits.php component where manipulating the id argument enables SQL injection. Exploitation can be performed remotely; the exploit has been disclosed publicly. Multiple ...

CVE-2024-0471

CVE-2024-0471 affects code-projects Human Resource Integrated System 1.0 in the /admin_route/dec_service_credits.php file. The root cause is manipulation of the date parameter that enables SQL injection. This vulnerability has been described as critical and is exploitable remotely, with public di...