Human Resource Management System

Vendor:

First CVE: Oct 12, 2022 · Active for 3 years

29
Total CVEs
More Total CVEs than 97% of tracked products
7.3
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Human Resource Management System over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 12, 2022
3 years ago
Most Recent CVE
Jul 29, 2025
364 days ago

CVE Severity & Scoring

Human Resource Management System29 CVEs
All CVEs353,240 CVEs
MediumHighCritical
Attack Vector
Local1 (3.4%)
Network28 (96.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low29 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None19 (65.5%)
Unknown0 (0.0%)
Required10 (34.5%)
Privileges Required
Low11 (37.9%)
High3 (10.3%)
None15 (51.7%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (29 CVEs).

29 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-4273CRITICAL
A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hr
Dec 3, 20229.831NONO
CVE-2022-43262CRITICAL
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.
Nov 16, 20229.831NONO
CVE-2022-3458CRITICAL
A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the
Oct 12, 20229.831NONO
CVE-2022-3492HIGH
A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Hand
Oct 13, 20228.828NONO
CVE-2025-40682CRITICAL
SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” pa
Jul 29, 20259.827NONO
CVE-2023-3391CRITICAL
A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.p
Jun 23, 20239.827NONO
CVE-2022-43318HIGH
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.
Nov 7, 20228.827NONO
CVE-2022-3496HIGH
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php
Oct 14, 20228.827NONO
CVE-2024-35469CRITICAL
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.
May 30, 20249.826NONO
CVE-2022-4278HIGH
A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employe
Dec 3, 20227.224NONO
View all 29 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (29 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (29 CVEs).

Media Mentions

Signals from CVEs in this product scope (29 CVEs).

Top CNAs Publishing CVEs For Human Resource Management System

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.0257.30.5%00