Description
SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Human Resource Management System | Human Resource Management System | 1.0 | — |