https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13421.htmlhttps://patchthecve.com/cve/CVE-2025-13421.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-13420.htmlhttps://patchthecve.com/cve/CVE-2025-13420.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manipulation of the argument eventSubject causes sql injection. The attack can be initiated remotely. The exploit has been made https://patchthecve.com/cve/CVE-2025-40686.htmlhttps://patchthecve.com/cve/CVE-2025-40686.htmlWed, 17 Jun 2026 09:21:57 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'employeeid' parameter in/detailview.php.https://patchthecve.com/cve/CVE-2025-40685.htmlhttps://patchthecve.com/cve/CVE-2025-40685.htmlWed, 17 Jun 2026 09:21:57 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searcstate' parameter in/state.php.https://patchthecve.com/cve/CVE-2025-40684.htmlhttps://patchthecve.com/cve/CVE-2025-40684.htmlWed, 17 Jun 2026 09:21:57 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php.https://patchthecve.com/cve/CVE-2025-40683.htmlhttps://patchthecve.com/cve/CVE-2025-40683.htmlWed, 17 Jun 2026 09:21:57 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccity' parameter in /city.php.https://patchthecve.com/cve/CVE-2025-40682.htmlhttps://patchthecve.com/cve/CVE-2025-40682.htmlWed, 17 Jun 2026 09:21:57 +0000CRITICAL 9.8: SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint.https://patchthecve.com/cve/CVE-2025-3384.htmlhttps://patchthecve.com/cve/CVE-2025-3384.htmlWed, 17 Jun 2026 09:19:50 +0000HIGH 7.3: A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The https://patchthecve.com/cve/CVE-2024-13006.htmlhttps://patchthecve.com/cve/CVE-2024-13006.htmlWed, 17 Jun 2026 07:00:57 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely. The