Approved changes feed: RSS · Atom

cpe:2.3:a:fabian:human_resource_integrated_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorFabian (fbf7922e-b691-5c28-8717-83ed5e15ae54)
ProductHuman Resource Integrated System (362f882b-3cb5-51a8-bc28-61dae160b068)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9733 vulnerable 2026-06-08 07:47:09.676579 code-projects Human Resource Integrated System login_timeee.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. This impacts an unknown function of the file /login_timeee.php. Performing manipulation of the argument emp_id results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-08-31T14:32:06.605Z
Updated: 2025-09-02T15:14:20.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8501 vulnerable 2026-06-08 07:45:20.652312 code-projects Human Resource Integrated System action.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-03T06:02:05.573Z
Updated: 2025-08-04T13:08:44.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8500 vulnerable 2026-06-08 07:45:20.651824 code-projects Human Resource Integrated System action.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-03T05:02:05.263Z
Updated: 2025-08-04T13:09:41.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56293 vulnerable 2026-06-08 07:33:15.575937 Details available
code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting (XSS) in the Add Child Information section in the Childs Name field.
Published: 2025-09-16T00:00:00.000Z
Updated: 2026-07-05T01:12:09.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.