CVE-2025-8500

CVE-2025-8500 affects code-projects Human Resource Integrated System 1.0. The vulnerability is an SQL injection in the /insert-and-view/action.php parameter handling, caused by input manipulation. Impact is severity MEDIUM–HIGH depending on metric source, with potential remote exploitation and pu...

CVE-2025-8501

The CVE-2025-8501 entry concerns code-projects Human Resource Integrated System (HRIS) version 1.0. A vulnerability in the file /insert-and-view/action.php, arising from manipulation of the content parameter, enables Cross-Site Scripting (XSS). The issue is remotely exploitable and has publicly d...

CVE-2025-56293

The code-projects Human Resource Integrated System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is an incorrectly filtered input within the Childs Name field in the Add Child Information section. Exploitation of this flaw can allow an attacker to perform a cross-site scripting...

CVE-2025-9733

CVE-2025-9733 affects code-projects Human Resource Integrated System 1.0. The vulnerable component is the file /login_timeee.php where manipulation of the parameter emp_id enables SQL injection . Root cause is insufficient validation/handling of external input in that parameter, allowing remote e...