Login Request a demo
HR
Product
Human Resource Management System
by SourceCodester · last CVE Oct 13, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 4High 6Medium 10Low 0
Severity
All severities20Critical4High6Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Human Resource Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-35469
9.8
1%
May 30
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter
Affected: 1.0
CVE-2023-3391
9.8
1%
Jun 23
SourceCodester Human Resource Management System detailview.php sql injection
Affected: 1.0
CVE-2022-4273
9.8
1%
Dec 3
SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload
Affected: 1.0
CVE-2022-3458
9.8
0%
Oct 12
SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload
Affected: 1.0
CVE-2024-34221
8.8
1%
May 13
Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation
Affected: through 1.0
CVE-2022-3496
8.8
0%
Oct 14
SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
Affected: 1.0
CVE-2022-3492
8.8
1%
Oct 13
SourceCodester Human Resource Management System Profile Photo os command injection
Affected: 1.0
CVE-2024-34220
7.5
1%
May 9
Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter
Affected: All versions, or not specified
CVE-2026-108972
7.3
0%
Oct 13
SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication
Affected: 1.0
CVE-2022-4278
7.2
1%
Dec 3
SourceCodester Human Resource Management System employeeadd.php sql injection
Affected: 1.0
CVE-2022-3470
6.5
1%
Oct 12
SourceCodester Human Resource Management System getstatecity.php sql injection
Affected: All versions, or not specified
CVE-2022-3473
6.5
1%
Oct 12
SourceCodester Human Resource Management System getstatecity.php sql injection
Affected: All versions, or not specified
CVE-2022-4279
6.1
1%
Dec 3
SourceCodester Human Resource Management System employeeview.php cross site scripting
Affected: 1.0
CVE-2024-34222
5.9
0%
May 13
Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter
Affected: All versions, or not specified
CVE-2024-35468
5.4
0%
May 30
A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password…
Affected: 1.0
CVE-2022-3497
5.4
0%
Oct 14
SourceCodester Human Resource Management System Master List cross site scripting
Affected: 1.0
CVE-2022-3493
5.4
0%
Oct 13
SourceCodester Human Resource Management System Add Employee cross site scripting
Affected: 1.0
CVE-2022-3471
4.9
1%
Oct 12
SourceCodester Human Resource Management System city.php sql injection
Affected: All versions, or not specified
CVE-2022-3472
4.9
1%
Oct 12
SourceCodester Human Resource Management System city.php sql injection
Affected: All versions, or not specified
CVE-2024-34223
4.3
0%
May 13
Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket
Affected: 1.0
Showing 20