Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:human_resource_integrated_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductHuman Resource Integrated System (31b78d04-54f5-5fcb-ada6-4d601460e5d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9743 vulnerable 2026-06-08 07:47:09.687247 code-projects Human Resource Integrated System login_attendance2.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file login_attendance2.php. Performing manipulation of the argument employee_id/date results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-08-31T19:32:07.399Z
Updated: 2025-09-02T15:13:17.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9742 vulnerable 2026-06-08 07:47:09.686707 code-projects Human Resource Integrated System login.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2025-08-31T19:02:07.048Z
Updated: 2025-09-02T15:13:26.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9741 vulnerable 2026-06-08 07:47:09.686177 code-projects Human Resource Integrated System login_query12.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /login_query12.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-08-31T18:32:06.027Z
Updated: 2025-09-02T15:13:31.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9740 vulnerable 2026-06-08 07:47:09.685600 code-projects Human Resource Integrated System log_query.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /log_query.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2025-08-31T18:02:06.424Z
Updated: 2025-09-02T15:13:37.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0471 vulnerable 2026-06-08 06:22:01.183542 code-projects Human Resource Integrated System dec_service_credits.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin_route/dec_service_credits.php. The manipulation of the argument date leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250576.
Published: 2024-01-12T21:00:07.539Z
Updated: 2025-06-13T19:04:32.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0470 vulnerable 2026-06-08 06:22:01.182843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0469 vulnerable 2026-06-08 06:22:01.182135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.