Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-13535 1 Codeastro 1 Human Resource Management System 2026-06-29 6.3 Medium
A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employee_model.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
CVE-2026-13525 1 Codeastro 1 Human Resource Management System 2026-06-29 6.3 Medium
A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employee_model.php of the component Update_Earn_Leave Endpoint. The manipulation of the argument emid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2026-13537 1 Codeastro 1 Human Resource Management System 2026-06-29 4.3 Medium
A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely. The exploit has been made public and could be used.