CVE-2025-9741
HIGHCode-Projects HRIS 1.0 - SQL Injection
Title source: llmDescription
A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /login_query12.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Scores
CVSS v3
7.3
EPSS
0.0003
EPSS Percentile
7.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-74
CWE-89
Status
published
Affected Products (1)
code-projects/human_resource_integrated_system
Timeline
Published
Aug 31, 2025
Tracked Since
Feb 18, 2026