CNNVD-202508-174 Information

CNNVD ID

CNNVD-202508-174

CVE-2025-8500

  • CNNVD Published: 2025-08-03

Description (Chinese)

Human Resource Integrated System是一个人力资源整合系统。 Code-Projects Human Resource Integrated System 1.0版本存在注入漏洞,该漏洞源于文件/insert-and-view/action.php中参数content的错误操作导致SQL注入。

Description (English)

Human Resources Integrated System is a human resources integration system. There is an injection loophole in version 1.0 of Code-Projects Human Resources Integrated System, which stems from the error of the parameter content in the document/insert-and-view/action.php resulting in the SQL injection.

Hazard Level

High

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-08-03

Last Modified

2026-02-24

References

https://vuldb.com/?submit.626791 https://vuldb.com/?ctiid.318599 https://code-projects.org/ https://github.com/shenxianyuguitian/hris-vuln-sqli/blob/main/README.md https://vuldb.com/?id.318599 https://access.redhat.com/security/cve/cve-2025-8500

Share on: