CVE-2024-0469

Medium

Description

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update_personal_info.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250574 is the identifier assigned to this vulnerability.

SeverityMedium

CVSS6.3

Exploit probability—

ProductCode-projects Human Resource Integrated System

PublishedJan 12, 2024

First seenJan 12, 2024

Weakness typeCWE-89SQL injection

How to fix

Patches

github.com/yingqian1984/FirePunch/blob/main/11-Human%20Resource%20Integrated%20System%20has%20SQL%20injection%20vulnerabilities%20update_personal_info.php.pdf

Affected products

Product	Affected versions	Fixed in
code-projects human_resource_integrated_system	1.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.