CVE-2023-3391

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232288.

• CWE-89

• https://github.com/mohdkey/Human-Resource-Management-System/blob/main/Human%20Resource%20Management%20System%20detailview.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232288Permissions Required, Third Party Advisory
• https://vuldb.com/?id.232288Permissions Required, Third Party Advisory
• https://github.com/mohdkey/Human-Resource-Management-System/blob/main/Human%20Resource%20Management%20System%20detailview.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232288Permissions Required, Third Party Advisory
• https://vuldb.com/?id.232288Permissions Required, Third Party Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33904In hci_server, there is a possible out of bounds read due to…4.4
• CVE-2023-33905In iwnpi server, there is a possible out of bounds write due…4.4
• CVE-2023-33906In Contacts Service, there is a possible missing permission …5.5
• CVE-2023-33907In Contacts Service, there is a possible missing permission …5.5
• CVE-2023-33908In ims service, there is a possible missing permission check…5.5
• CVE-2023-33909In Contacts service, there is a possible missing permission …5.5
• CVE-2023-33910In Contacts Service, there is a possible missing permission …5.5
• CVE-2023-33911In vowifi service, there is a possible missing permission ch…5.5
• CVE-2023-33912In Contacts service, there is a possible missing permission …5.5
• CVE-2023-33913In DRM/oemcrypto, there is a possible out of bounds write du…7.2
• CVE-2023-33914In NIA0 algorithm in Security Mode Command, there is a possi…7.5
• CVE-2023-33915In LTE protocol stack, there is a possible missing permissio…7.5