Vulnerability Details CVE-2024-35469
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.8%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/dovankha/CVE-2024-35469
- https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html
- https://github.com/dovankha/CVE-2024-35469
- https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html
Products affected by CVE-2024-35469
-
cpe:2.3:a:oretnom23:human_resource_management_system:1.0