CVE-2025-9733

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Integrated System version 1.0

Description A security flaw exists in code-projects Human Resource Integrated System version 1.0. The issue impacts an unknown function within the /login timeee.php file. Manipulation of the emp id argument can lead to SQL injection. The attack can be initiated remotely, and the exploit has been publicly released.

Recommendations As a temporary workaround, consider restricting access to the /login timeee.php file until a fix is available. Sanitize the emp id argument to prevent SQL injection attacks.