Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:human_resource_management:1.0.1:*:*:*:*:*:*:*

part: a version: 1.0.1 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductHuman Resource Management (97515345-b369-5abc-85bd-ccdf3ee3c210)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2590 vulnerable 2026-06-03 15:00:25.962316 code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting
LOW (2.4)
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-21T13:00:08.940Z
Updated: 2025-03-21T13:29:48.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2589 vulnerable 2026-06-03 15:00:25.961804 code-projects Human Resource Management System Account.go Index improper authorization
MEDIUM (5.5)
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.
Published: 2025-03-21T12:31:04.867Z
Updated: 2025-03-21T17:23:43.618Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.