CVE-2025-9742
HIGHCode-Projects HRIS 1.0 - SQL Injection
Title source: llmDescription
A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Scores
CVSS v3
7.3
EPSS
0.0002
EPSS Percentile
6.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-74
CWE-89
Status
published
Affected Products (1)
code-projects/human_resource_integrated_system
Timeline
Published
Aug 31, 2025
Tracked Since
Feb 18, 2026