CVE-2025-3384 in Human Resource Management Systeminformation

Résumé

par MITRE • 08/04/2025

A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

VulDB

Divulgation

08/04/2025

Modérer

accepté

Entrée

VDB-303630

CPE

prêt

Exploitation

Télécharger

EPSS

0.00514

KEV

non

Activités

très faible

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!