critical9.8
CVE-2024-35469
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the p…
Impact
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Human Resource Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/dovankha/CVE-2024-35469
- https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html
- https://github.com/dovankha/CVE-2024-35469
- https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html