https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9476.htmlhttps://patchthecve.com/cve/CVE-2025-9476.htmlWed, 17 Jun 2026 10:09:04 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /Superadmin_Dashboard/process/editemployee_process.php. Such manipulation of the argument employee_file201 leads to unrestricted upload. The attackhttps://patchthecve.com/cve/CVE-2025-9475.htmlhttps://patchthecve.com/cve/CVE-2025-9475.htmlWed, 17 Jun 2026 10:09:04 +0000HIGH 7.3: A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin_Dashboard/process/editemployee_process.php. This manipulation of the argument employee_file201 causes unrestricted upload. The attack may be inhttps://patchthecve.com/cve/CVE-2024-3415.htmlhttps://patchthecve.com/cve/CVE-2024-3415.htmlWed, 17 Jun 2026 07:44:13 +0000LOW 3.5: A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file Superadmin_Dashboard/process/addbranches_process.php. The manipulation of the argument branches_name leads to cross site scripting. Ithttps://patchthecve.com/cve/CVE-2024-3414.htmlhttps://patchthecve.com/cve/CVE-2024-3414.htmlWed, 17 Jun 2026 07:44:13 +0000LOW 3.5: A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file Superadmin_Dashboard/process/addcorporate_process.php. The manipulation of the argument corporate_name leads to cross site scriptinghttps://patchthecve.com/cve/CVE-2024-3413.htmlhttps://patchthecve.com/cve/CVE-2024-3413.htmlWed, 17 Jun 2026 07:44:13 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/login_process.php. The manipulation of the argument hr_email/hr_password leads to sql injection. The attack can be initiat