CVE-2025-8500

CVE-2025-8500 affects code-projects Human Resource Integrated System 1.0. The vulnerability is an SQL injection in the /insert-and-view/action.php parameter handling, caused by input manipulation. Impact is severity MEDIUM–HIGH depending on metric source, with potential remote exploitation and pu...

CVE-2025-8501

The CVE-2025-8501 entry concerns code-projects Human Resource Integrated System (HRIS) version 1.0. A vulnerability in the file /insert-and-view/action.php, arising from manipulation of the content parameter, enables Cross-Site Scripting (XSS). The issue is remotely exploitable and has publicly d...

CVE-2025-56293

The CVE-2025-56293 entry concerns code-projects Human Resource Integrated System 1.0, where a Cross Site Scripting (XSS) vulnerability exists in the Add Child Information section via the Childs Name field. The root cause is insufficient input validation/sanitization in that field, enabling script...

CVE-2025-9733

CVE-2025-9733 affects code-projects Human Resource Integrated System 1.0. The vulnerable component is the file /login_timeee.php where manipulation of the parameter emp_id enables SQL injection . Root cause is insufficient validation/handling of external input in that parameter, allowing remote e...