Advisories · Technology

SourceCodester Human Resource Management System.

Every CVE that names SourceCodester Human Resource Management System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108972 CVE record

CVSS 6.9 Medium

SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication
- SourceCodester Human Resource Management System
- Authentication bypass
Not analysed yet 13 Oct 2026
CVE-2023-3391 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System detailview.php sql injection
- SourceCodester Human Resource Management System
- SQL injection
Not analysed yet 23 Jun 2023
CVE-2022-4279 CVE record

CVSS 3.5 Low

SourceCodester Human Resource Management System employeeview.php cross site scripting
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 3 Dec 2022
CVE-2022-4278 CVE record

CVSS 4.7 Medium

SourceCodester Human Resource Management System employeeadd.php sql injection
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 3 Dec 2022
CVE-2022-4273 CVE record

CVSS 7.3 High

SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload
- SourceCodester Human Resource Management System
- Privilege escalation
Not analysed yet 3 Dec 2022
CVE-2022-3497 CVE record

CVSS 3.5 Low

SourceCodester Human Resource Management System Master List cross site scripting
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 14 Oct 2022
CVE-2022-3496 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System Admin Panel employeeadd.php access control
- SourceCodester Human Resource Management System
- Privilege escalation
Not analysed yet 14 Oct 2022
CVE-2022-3493 CVE record

CVSS 3.5 Low

SourceCodester Human Resource Management System Add Employee cross site scripting
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 13 Oct 2022
CVE-2022-3492 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System Profile Photo os command injection
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 13 Oct 2022
CVE-2022-3473 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System getstatecity.php sql injection
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 12 Oct 2022
CVE-2022-3472 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System city.php sql injection
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 12 Oct 2022
CVE-2022-3471 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System city.php sql injection
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 12 Oct 2022
CVE-2022-3470 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System getstatecity.php sql injection
- SourceCodester Human Resource Management System
- CWE-707
Not analysed yet 12 Oct 2022
CVE-2022-3458 CVE record

CVSS 6.3 Medium

SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload
- SourceCodester Human Resource Management System
- Privilege escalation
Not analysed yet 12 Oct 2022