Priority HIGH 82
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00636 · Published 2024-05-30 · No fix listed CWE-89
Priority HIGH 81
A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00823 · Published 2022-12-03 · No fix listed CWE-266
Priority HIGH 75
A vulnerability was found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00743 · Published 2023-06-23 · No fix listed CWE-89
Priority MEDIUM 62
Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.00395 · Published 2024-05-13 · No fix listed CWE-89
Priority MEDIUM 61
A vulnerability was found in SourceCodester Human Resource Management System.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00626 · Published 2022-10-12 · No fix listed CWE-707
Priority MEDIUM 58
A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.0035 · Published 2024-05-30 · No fix listed CWE-89
Priority MEDIUM 53
Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00477 · Published 2024-05-13 · No fix listed CWE-276
Priority MEDIUM 44
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00804 · Published 2022-11-16 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00506 · Published 2022-10-12 · No fix listed CWE-266
Priority MEDIUM 42
Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00845 · Published 2024-05-13 · No fix listed CWE-276
Priority MEDIUM 40
SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php en…
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2025-07-29 · No fix listed CWE-89
Priority MEDIUM 40
Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0078 · Published 2024-05-09 · No fix listed CWE-89
Priority MEDIUM 40
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0096 · Published 2022-11-07 · No fix listed CWE-89
Priority MEDIUM 40
A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01018 · Published 2022-10-13 · No fix listed CWE-707
Priority LOW 39
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00505 · Published 2022-10-14 · No fix listed CWE-266
Priority LOW 33
A vulnerability was found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00731 · Published 2022-12-03 · No fix listed CWE-707
Priority LOW 30
A vulnerability classified as critical has been found in SourceCodester Human Resource Management System.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00705 · Published 2022-10-12 · No fix listed CWE-707
Priority LOW 30
A vulnerability was found in SourceCodester Human Resource Management System.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00631 · Published 2022-10-12 · No fix listed CWE-707
Priority LOW 29
A vulnerability was found in SourceCodester Human Resource Management System.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00626 · Published 2022-10-12 · No fix listed CWE-707
Priority LOW 28
Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00485 · Published 2022-11-25 · No fix listed CWE-79
Priority LOW 28
A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0057 · Published 2022-11-07 · No fix listed CWE-79
Priority LOW 28
A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00546 · Published 2022-12-03 · No fix listed CWE-707
Priority LOW 25
A vulnerability was found in Human Resource Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00592 · Published 2022-10-14 · No fix listed CWE-707
Priority LOW 25
A vulnerability was found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00406 · Published 2022-10-14 · No fix listed CWE-707
Priority LOW 25
A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00406 · Published 2022-10-13 · No fix listed CWE-707
Load more
THREATIST.IORead the docs