PT-2025-35421 · Code Projects · Human Resource Integrated System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
code-projects Human Resource Integrated System version 1.0
Description
A SQL injection issue exists in the /log query.php file. Manipulation of the
ID argument can lead to SQL injection. The exploit has been made public and could be used to perform remote attacks.Recommendations
As a temporary workaround, consider restricting access to the /log query.php file until a fix is available.
Sanitize the
ID argument to prevent SQL injection attacks.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Human Resource Integrated System