CVE-2024-0470: medium-severity vulnerability in code-projects Human Resource Integrated System
code-projects Human Resource Integrated System inc_service_credits.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.5%
A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /admin_route/inc_service_credits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250575.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
code-projects · Human Resource Integrated SystemRelated CVEs — code-projects Human Resource Integrated System
In the same product, most dangerous first.
CVE-2025-8500MEDIUMcode-projects Human Resource Integrated System action.php sql injectionEPSS 0.6%CVE-2025-9743MEDIUMcode-projects Human Resource Integrated System login_attendance2.php sql injectionEPSS 0.5%CVE-2024-0471MEDIUMcode-projects Human Resource Integrated System dec_service_credits.php sql injectionEPSS 0.5%CVE-2024-0469MEDIUMcode-projects Human Resource Integrated System update_personal_info.php sql injectionEPSS 0.5%CVE-2025-9740MEDIUMcode-projects Human Resource Integrated System log_query.php sql injectionEPSS 0.5%CVE-2025-9733MEDIUMcode-projects Human Resource Integrated System login_timeee.php sql injectionEPSS 0.5%