CVE-2025-40682: falha de alta gravidade em Human Resource Management System
SQL injection vulnerability in Human Resource Management System
Publicada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.3%
probabilidade de exploração
0.3%top 76% das CVEs
exploração observada
nãonenhuma fonte reporta
SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Human Resource Management System · Human Resource Management SystemCVEs relacionadas — Human Resource Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-40686MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management SystemEPSS 0.2%CVE-2025-40685MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management SystemEPSS 0.2%CVE-2025-40684MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management SystemEPSS 0.2%CVE-2025-40683MEDIUMReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management SystemEPSS 0.2%