CVE-2013-5208
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which...
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
Exploit likelihood
What each source reports
NVD Score used
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
- Record
CVE-2013-5208- CVSS 2.0
- 4.1 Medium
AV:L/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
- Record
CVE-2013-5208- Updated
- 2026-11-02
EUVDEUVD-2013-5048 No score
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
- Record
EUVD-2013-5048- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p4v5-3x8h-jxq7 No score
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which...
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
- Record
GHSA-p4v5-3x8h-jxq7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5208 is a medium vulnerability (CVSS 4.1) in Infohr Hr Human Resource Information System, published October 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.