Human Resource Information System version 1.0 suffers from an unauthenticated administrative account creation vulnerability.