Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Human Resource Management System — Vulnerabilities & Security Advisories 32

All 32 CVE vulnerabilities found in Human Resource Management System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities specifically for the Human Resource Management System, categorizing them by specific vendor, affected product, weakness type, and security tags. It collects known security flaws affecting this system over the past five years, providing a consolidated view of both legacy and recent issues. Readers can use this resource to track a specific vendor's security advisories, understand the prevalence of a particular weakness class within HR software, and review the complete vulnerability history for the Human Resource Management System to assess current risk exposure.

Vendor: SourceCodester

CVE ID Title CVSS Severity Published
CVE-2026-13537 CodeAstro Human Resource Management System cross-site request forgery CWE-352 4.3 Medium 2026-06-29
CVE-2026-13535 CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection CWE-89 6.3 Medium 2026-06-29
CVE-2026-13525 CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection CWE-89 6.3 Medium 2026-06-29
CVE-2026-12131 CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection CWE-89 6.3 Medium 2026-06-12
CVE-2026-12130 CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting CWE-79 3.5 Low 2026-06-12
CVE-2026-12129 CodeAstro Human Resource Management System Dashboard add_tod cross site scripting CWE-79 3.5 Low 2026-06-12
CVE-2026-11491 CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting CWE-79 2.4 Low 2026-06-08
CVE-2025-13421 itsourcecode Human Resource Management System NoticeStore.php sql injection CWE-89 7.3 High 2025-11-19
CVE-2025-13420 itsourcecode Human Resource Management System EventStore.php sql injection CWE-89 7.3 High 2025-11-19
CVE-2025-40686 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AI Medium AI 2025-07-29
CVE-2025-40685 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AI Medium AI 2025-07-29
CVE-2025-40684 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AI Medium AI 2025-07-29
CVE-2025-40683 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AI Medium AI 2025-07-29
CVE-2025-40682 SQL injection vulnerability in Human Resource Management System CWE-89 9.8AI Critical AI 2025-07-29
CVE-2025-3384 1000 Projects Human Resource Management System employee.php sql injection CWE-89 7.3 High 2025-04-07
CVE-2025-2590 code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting CWE-79 2.4 Low 2025-03-21
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization CWE-285 5.5 Medium 2025-03-21
CVE-2024-13006 1000 Projects Human Resource Management System employeeview.php sql injection CWE-89 7.3 High 2024-12-29
CVE-2023-3391 SourceCodester Human Resource Management System detailview.php sql injection CWE-89 6.3 Medium 2023-06-23
CVE-2022-4279 SourceCodester Human Resource Management System employeeview.php cross site scripting CWE-707 3.5 Low 2022-12-03
CVE-2022-4278 SourceCodester Human Resource Management System employeeadd.php sql injection CWE-707 4.7 Medium 2022-12-03
CVE-2022-4273 SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload CWE-266 7.3 High 2022-12-03
CVE-2022-3502 Human Resource Management System Leave cross site scripting CWE-707 3.5 Low 2022-10-14
CVE-2022-3497 SourceCodester Human Resource Management System Master List cross site scripting CWE-707 3.5 Low 2022-10-14
CVE-2022-3496 SourceCodester Human Resource Management System Admin Panel employeeadd.php access control CWE-266 6.3 Medium 2022-10-14
CVE-2022-3493 SourceCodester Human Resource Management System Add Employee cross site scripting CWE-707 3.5 Low 2022-10-13
CVE-2022-3492 SourceCodester Human Resource Management System Profile Photo os command injection CWE-707 6.3 Medium 2022-10-13
CVE-2022-3458 SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload CWE-266 6.3 Medium 2022-10-12
CVE-2022-3473 SourceCodester Human Resource Management System getstatecity.php sql injection CWE-707 6.3 Medium 2022-10-12
CVE-2022-3472 SourceCodester Human Resource Management System city.php sql injection CWE-707 6.3 Medium 2022-10-12

All 32 known CVE vulnerabilities affecting Human Resource Management System with full Chinese analysis, references, and POCs where available.