critical9.8
CVE-2025-40682
SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the …
Impact
SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Human Resource Management System | Version 1.0 |