Human Resource Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:codeastro:human_resource_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be) |
|---|---|
| Product | Human Resource Management System (76419147-2947-5847-b2c1-0c865c558ae9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13537 |
vulnerable | 2026-07-29 00:23:33.150062 |
CodeAstro Human Resource Management System cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2026-06-29T05:00:09.557Z
Updated: 2026-06-29T10:59:53.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13535 |
vulnerable | 2026-07-29 00:23:33.146608 |
CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection
MEDIUM (6.3)
A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employee_model.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2026-06-29T04:30:09.295Z
Updated: 2026-06-29T12:57:38.344Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13525 |
vulnerable | 2026-07-29 00:23:33.138948 |
CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection
MEDIUM (6.3)
A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employee_model.php of the component Update_Earn_Leave Endpoint. The manipulation of the argument emid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2026-06-29T02:00:09.127Z
Updated: 2026-06-29T11:09:31.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12131 |
vulnerable | 2026-07-29 00:23:32.065929 |
CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection
MEDIUM (6.3)
A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function Invoice of the file \application\controllers\Payroll.php of the component Payroll Invoice Module. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-12T21:15:08.544Z
Updated: 2026-06-15T13:00:46.543Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12130 |
vulnerable | 2026-07-29 00:23:32.065707 |
CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting
LOW (3.5)
A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. This affects an unknown part of the file /Projects/Add_Projects of the component Projects Management Page. The manipulation of the argument protitle results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-12T20:45:08.820Z
Updated: 2026-06-15T19:27:45.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12129 |
vulnerable | 2026-07-29 00:23:32.065468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11491 |
vulnerable | 2026-07-29 00:23:31.263264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.