CVE-2025-9743

HIGH

Code-projects HRIS 1.0 - SQL Injection

Title source: llm

Description

A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file login_attendance2.php. Performing manipulation of the argument employee_id/date results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0003
EPSS Percentile 7.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

code-projects/human_resource_integrated_system

Timeline

Published Aug 31, 2025
Tracked Since Feb 18, 2026