Description
Human Resource Management System是maverickosama个人开发者的一个人力资源管理系统。 Human Resource Management System 1.0版本存在注入漏洞，该漏洞源于/employeeview.php文件的search参数包含一个SQL注入漏洞。
Human Resource Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/ibaiw/2024Hvv/blob/main/%E6%B3%9B%E5%BE%AEHrmService%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/pursue-security/p/17704093.html
https://stack.chaitin.com/vuldb/detail/2278d24c-2473-4c3b-827e-5b5b7e95cbb9
https://download.sangfor.com.cn/a2b804757c2945f4964704dffd382ef8.pdf
https://blog.csdn.net/qq_40550150/article/details/137384668
https://ddpoc.com/DVB-2024-7965.html
https://rivers.chaitin.cn/blog/cq70jnqp1rhtmlvvdo60
https://cn-sec.com/archives/2269222.html
https://zone.ci/vulns/ys/358421.html
https://www.exploit-db.com/exploits/51877
https://nvd.nist.gov/vuln/detail/CVE-2025-40682
https://www.sentinelone.com/vulnerability-database/cve-2024-13006/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-hrm-lite-human-resource-management-system/wp-hrm-lite-11-unauthenticated-sql-injection