Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HJSoft HCM Human Resources Management System downlawbase sql injection
Vulnerability Description
A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability is an unknown functionality of the file /templates/attestation/../../selfservice/lawresource/downlawbase. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
HJSoft HCM Human Resources Management System 注入漏洞
Vulnerability Description
HJSoft HCM Human Resources Management System是中国宏景（HJSoft）个人开发者的一个人力资源管理软件。 HJSoft HCM Human Resources Management System 20250822及之前版本存在SQL注入漏洞，该漏洞源于文件/templates/attestation/../../selfservice/lawresource/downlawbase参数ID操作不当，可能导致SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A