Human Resource Management System (Oretnom23) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-07-29. Vendor: Oretnom23.

CVEs of Human Resource Management System

CVE-2025-40686 - CVSS 6.1 (medium), 2025-07-29: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in…
CVE-2025-40683 - CVSS 6.1 (medium), 2025-07-29: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in…
CVE-2025-40682 - CVSS 9.8 (critical), 2025-07-29: SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the…
CVE-2025-40685 - CVSS 6.1 (medium), 2025-07-29: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in…
CVE-2025-40684 - CVSS 6.1 (medium), 2025-07-29: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in…
CVE-2024-35468 - CVSS 5.4 (medium), 2024-05-30: A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via…
CVE-2024-35469 - CVSS 9.8 (critical), 2024-05-30: A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the…
CVE-2024-34221 - CVSS 8.8 (high), 2024-05-14: Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.
CVE-2024-34223 - CVSS 4.3 (medium), 2024-05-14: Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave…
CVE-2024-34222 - CVSS 5.9 (medium), 2024-05-14: Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.
CVE-2024-34220 - CVSS 7.5 (high), 2024-05-14: Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.
CVE-2023-3391 - CVSS 9.8 (critical), 2023-06-23: A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of…
CVE-2022-4278 - CVSS 7.2 (high), 2022-12-03: A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of…
CVE-2022-4279 - CVSS 6.1 (medium), 2022-12-03: A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file…
CVE-2022-4273 - CVSS 9.8 (critical), 2022-12-03: A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown…
CVE-2022-45218 - CVSS 6.1 (medium), 2022-11-25: Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. This vulnerability is triggered via a crafted…
CVE-2022-43262 - CVSS 9.8 (critical), 2022-11-16: Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.
CVE-2022-43318 - CVSS 8.8 (high), 2022-11-07: Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.
CVE-2022-43317 - CVSS 6.1 (medium), 2022-11-07: A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or…
CVE-2022-3502 - CVSS 5.4 (medium), 2022-10-14: A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave…
CVE-2022-3497 - CVSS 5.4 (medium), 2022-10-14: A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unknown function of…
CVE-2022-3496 - CVSS 8.8 (high), 2022-10-14: A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the…
CVE-2022-3493 - CVSS 5.4 (medium), 2022-10-13: A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown…
CVE-2022-3492 - CVSS 8.8 (high), 2022-10-13: A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the…
CVE-2022-3472 - CVSS 6.3 (medium), 2022-10-13: A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown…
CVE-2022-3471 - CVSS 6.3 (medium), 2022-10-13: A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown…
CVE-2022-3470 - CVSS 6.5 (medium), 2022-10-13: A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file…
CVE-2022-3473 - CVSS 6.5 (medium), 2022-10-13: A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file…
CVE-2022-3458 - CVSS 9.8 (critical), 2022-10-12: A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown…