CVE-2025-8500

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://code-projects.org/Product
• https://github.com/shenxianyuguitian/hris-vuln-sqli/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.318599Permissions Required
• https://vuldb.com/?id.318599Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.626791Exploit, Third Party Advisory, VDB Entry
• https://github.com/shenxianyuguitian/hris-vuln-sqli/blob/main/README.mdExploit, Third Party Advisory

Published

Aug 3, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8494A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-8495A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-8496A vulnerability has been found in projectworlds Online Admis…9.8
• CVE-2025-8497A weakness has been identified in code-projects Online Medic…9.8
• CVE-2025-8498A security vulnerability has been detected in code-projects …9.8
• CVE-2025-8499A vulnerability was found in code-projects Online Medicine G…9.8
• CVE-2025-8501A vulnerability classified as problematic has been found in …5.4
• CVE-2025-8502A vulnerability classified as critical was found in code-pro…9.8
• CVE-2025-8503A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-8504A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-8505A vulnerability has been found in 495300897 wx-shop up to de…4.3
• CVE-2025-8506A vulnerability was found in 495300897 wx-shop up to de1b663…3.5