Vulnerabilities

TI-2025-27156 CVE-2025-40686 · GHSA-g6w2-j3w7-hp5w

Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System

LOW 21

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00198 Published 2025-07-29 No fix listed CWE-79

TI-2025-27155 CVE-2025-40685 · GHSA-75qp-q2mh-2hw5

Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System

LOW 21

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00198 Published 2025-07-29 No fix listed CWE-79

TI-2025-27154 CVE-2025-40684 · GHSA-4jx3-7qrh-4fpw

Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System

LOW 21

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00198 Published 2025-07-29 No fix listed CWE-79

TI-2025-27153 CVE-2025-40683 · GHSA-75mx-qp79-4ghv

Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System

LOW 21

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00198 Published 2025-07-29 No fix listed CWE-79

TI-2025-27152 CVE-2025-40682 · GHSA-fw89-hr7j-cx8r

SQL injection in oretnom23 Human Resource Management System

MEDIUM 40

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php en…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00348 Published 2025-07-29 No fix listed CWE-89

TI-2024-23441 CVE-2024-35469

A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management…

HIGH 82

A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00636 Published 2024-05-30 No fix listed CWE-89

TI-2024-23440 CVE-2024-35468

A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource…

MEDIUM 58

A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0035 Published 2024-05-30 No fix listed CWE-89

TI-2024-22641 CVE-2024-34221 · GHSA-4vrv-4wc3-4q25

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions…

MEDIUM 42

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00845 Published 2024-05-13 No fix listed CWE-276

TI-2024-22642 CVE-2024-34222 · GHSA-6jgg-5f89-cp73

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.

MEDIUM 62

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00395 Published 2024-05-13 No fix listed CWE-89

TI-2024-22643 CVE-2024-34223 · GHSA-v7fc-pjq5-78hj

Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human…

MEDIUM 53

Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00477 Published 2024-05-13 No fix listed CWE-276

TI-2024-22640 CVE-2024-34220 · GHSA-2738-rgv4-92wj

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.

MEDIUM 40

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0078 Published 2024-05-09 No fix listed CWE-89

TI-2023-03171 CVE-2023-3391 · GHSA-796c-4hrx-2rq6

SourceCodester Human Resource Management System detailview.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-06-23 No fix listed CWE-89

TI-2022-03919 CVE-2022-4279 · GHSA-6rw4-h5r4-95fm

SourceCodester Human Resource Management System employeeview.php cross site scripting

LOW 28

A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00577 Published 2022-12-03 No fix listed CWE-707

TI-2022-03918 CVE-2022-4278 · GHSA-36c4-vh5m-q4h5

SourceCodester Human Resource Management System employeeadd.php sql injection

LOW 33

A vulnerability was found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00762 Published 2022-12-03 No fix listed CWE-707

TI-2022-03913 CVE-2022-4273 · GHSA-w23f-rm4q-vh36

SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload

HIGH 81

A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00857 Published 2022-12-03 No fix listed CWE-266

TI-2022-22276 CVE-2022-45218 · GHSA-g42w-w25x-7hww

Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting…

LOW 28

Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00485 Published 2022-11-25 No fix listed CWE-79

TI-2022-21112 CVE-2022-43262 · GHSA-9569-fmxv-7gf9

Human Resource Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 44

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2022-11-16 No fix listed CWE-89

TI-2022-21146 CVE-2022-43318 · GHSA-8mj2-cj84-pxm6

Human Resource Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 40

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0096 Published 2022-11-07 No fix listed CWE-89

TI-2022-21145 CVE-2022-43317 · GHSA-gr22-cgvv-mr7h

A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource…

LOW 28

A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0057 Published 2022-11-07 No fix listed CWE-79

TI-2022-03232 CVE-2022-3502 · GHSA-w665-48g4-w8g7

Human Resource Management System Leave cross site scripting

LOW 25

A vulnerability was found in Human Resource Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00592 Published 2022-10-14 No fix listed CWE-707

TI-2022-03228 CVE-2022-3497 · GHSA-jw99-6632-r82h

SourceCodester Human Resource Management System Master List cross site scripting

LOW 25

A vulnerability was found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00406 Published 2022-10-14 No fix listed CWE-707

TI-2022-03227 CVE-2022-3496 · GHSA-hhm5-8mw4-m6fp

SourceCodester Human Resource Management System Admin Panel employeeadd.php access control

LOW 39

A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00505 Published 2022-10-14 No fix listed CWE-266

TI-2022-03224 CVE-2022-3493 · GHSA-76cw-59x8-rvfm

SourceCodester Human Resource Management System Add Employee cross site scripting

LOW 25

A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00406 Published 2022-10-13 No fix listed CWE-707

TI-2022-03223 CVE-2022-3492 · GHSA-qfx3-p72w-gfwj

SourceCodester Human Resource Management System Profile Photo os command injection

MEDIUM 40

A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01018 Published 2022-10-13 No fix listed CWE-707

TI-2022-03207 CVE-2022-3473 · GHSA-x54x-rvhr-4mq6

SourceCodester Human Resource Management System getstatecity.php sql injection

LOW 30

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00705 Published 2022-10-12 No fix listed CWE-707

Vulnerabilities

Filters