CVE-2025-40682 — SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /con — CVE Database · The Intelligence Room