CVE-2025-9733: code-projects Human Resource Integrated System login_timeee.php sql injection
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. This impacts an unknown function of the file /logintimeee.php. Performing manipulation of the argument empid results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9733?
CVE-2025-9733 is classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-9733?
To fix CVE-2025-9733, ensure that proper input validation and parameterized queries are implemented in the /login_timeee.php file.
What type of vulnerability is CVE-2025-9733?
CVE-2025-9733 is an SQL injection vulnerability, which allows an attacker to manipulate SQL queries.
Can CVE-2025-9733 be exploited remotely?
Yes, CVE-2025-9733 can be exploited remotely, allowing attackers to execute malicious SQL commands.
What system is affected by CVE-2025-9733?
CVE-2025-9733 affects the Human Resource Integrated System 1.0 developed by Code-projects.