Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Human Resource Management System — Vulnerabilities & Security Advisories 32

All 32 CVE vulnerabilities found in Human Resource Management System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Human Resource Management System software, categorized by Common Weakness Enumeration identifiers and vendor advisories. It compiles known security flaws, including injection attacks, broken access control, and cryptographic failures, covering entries from the earliest recorded incidents through the present day. This resource allows security professionals and IT administrators to track a vendor’s historical advisory patterns, understand the prevalence and impact of specific weakness classes within HR platforms, and look up a product’s detailed vulnerability history to assess long-term risk exposure. By consolidating these disparate data points, the page facilitates comprehensive security posture evaluations for organizations relying on HR management tools. It serves as a central reference point for understanding how past vulnerabilities have been addressed and which architectural weaknesses persist across different vendors. This structured overview supports informed decision-making regarding patch management, third-party risk assessments, and software procurement strategies. Users can compare vulnerability trends across similar products to identify broader industry issues or isolate vendor-specific problems. The aggregated data provides context for prioritizing remediation efforts based on severity and exploitability. This page is intended for technical audiences seeking to mitigate risks associated with HR management systems by leveraging historical vulnerability intelligence rather than relying on isolated incident reports.

Vendor: SourceCodester

CVE IDTitleCVSSSeverityPublished
CVE-2026-13537 CodeAstro Human Resource Management System cross-site request forgery CWE-352 4.3 Medium2026-06-29
CVE-2026-13535 CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection CWE-89 6.3 Medium2026-06-29
CVE-2026-13525 CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection CWE-89 6.3 Medium2026-06-29
CVE-2026-12131 CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection CWE-89 6.3 Medium2026-06-12
CVE-2026-12130 CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting CWE-79 3.5 Low2026-06-12
CVE-2026-12129 CodeAstro Human Resource Management System Dashboard add_tod cross site scripting CWE-79 3.5 Low2026-06-12
CVE-2026-11491 CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting CWE-79 2.4 Low2026-06-08
CVE-2025-13421 itsourcecode Human Resource Management System NoticeStore.php sql injection CWE-89 7.3 High2025-11-19
CVE-2025-13420 itsourcecode Human Resource Management System EventStore.php sql injection CWE-89 7.3 High2025-11-19
CVE-2025-40686 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AIMediumAI2025-07-29
CVE-2025-40685 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AIMediumAI2025-07-29
CVE-2025-40684 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AIMediumAI2025-07-29
CVE-2025-40683 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CWE-79 6.1AIMediumAI2025-07-29
CVE-2025-40682 SQL injection vulnerability in Human Resource Management System CWE-89 9.8AICriticalAI2025-07-29
CVE-2025-3384 1000 Projects Human Resource Management System employee.php sql injection CWE-89 7.3 High2025-04-07
CVE-2025-2590 code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting CWE-79 2.4 Low2025-03-21
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization CWE-285 5.5 Medium2025-03-21
CVE-2024-13006 1000 Projects Human Resource Management System employeeview.php sql injection CWE-89 7.3 High2024-12-29
CVE-2023-3391 SourceCodester Human Resource Management System detailview.php sql injection CWE-89 6.3 Medium2023-06-23
CVE-2022-4279 SourceCodester Human Resource Management System employeeview.php cross site scripting CWE-707 3.5 Low2022-12-03
CVE-2022-4278 SourceCodester Human Resource Management System employeeadd.php sql injection CWE-707 4.7 Medium2022-12-03
CVE-2022-4273 SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload CWE-266 7.3 High2022-12-03
CVE-2022-3502 Human Resource Management System Leave cross site scripting CWE-707 3.5 Low2022-10-14
CVE-2022-3497 SourceCodester Human Resource Management System Master List cross site scripting CWE-707 3.5 Low2022-10-14
CVE-2022-3496 SourceCodester Human Resource Management System Admin Panel employeeadd.php access control CWE-266 6.3 Medium2022-10-14
CVE-2022-3493 SourceCodester Human Resource Management System Add Employee cross site scripting CWE-707 3.5 Low2022-10-13
CVE-2022-3492 SourceCodester Human Resource Management System Profile Photo os command injection CWE-707 6.3 Medium2022-10-13
CVE-2022-3458 SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload CWE-266 6.3 Medium2022-10-12
CVE-2022-3473 SourceCodester Human Resource Management System getstatecity.php sql injection CWE-707 6.3 Medium2022-10-12
CVE-2022-3472 SourceCodester Human Resource Management System city.php sql injection CWE-707 6.3 Medium2022-10-12

All 32 known CVE vulnerabilities affecting Human Resource Management System with full Chinese analysis, references, and POCs where available.