ByteOS Network

CVE Vulnerability Details :

CVE-2025-9742

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-31 Aug, 2025 | 19:02

Updated At-31 Aug, 2025 | 19:02

▼CVE Numbering Authority (CNA)

code-projects Human Resource Integrated System login.php sql injection

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Affected Products

Vendor

Source Code & Projects

Product

Human Resource Integrated System

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-89	SQL Injection
CWE	CWE-74	Injection

Metrics

Version	Base score	Base severity	Vector
4.0	6.9	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3.0	7.3	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.0	7.5	N/A	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Credits

reporter

cooorgi (VulDB User)

Timeline

Event	Date
Advisory disclosed	2025-08-30 00:00:00
VulDB entry created	2025-08-30 02:00:00
VulDB entry last update	2025-08-30 18:52:25

References

Hyperlink	Resource
https://vuldb.com/?id.322041	vdb-entry technical-description
https://vuldb.com/?ctiid.322041	signature permissions-required
https://vuldb.com/?submit.640112	third-party-advisory
https://github.com/cooorgi/cve/blob/main/hris_sql_login.md	exploit
https://code-projects.org/	product

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References