841 matches found
Employee Management System 1.0 - Cross Site Scripting (Stored)
Exploit Title: Employee Management System 1.0 - Stored Cross Site Scripting Date: 2020-10-16 Exploit Author: Ankita Pal Vendor Homepage: https://www.sourcecodester.com/php/14432/employee-management-system-using-php.html Software Link:...
SQL Injection Vulnerability in Road Transportation Workers Management Information System
Shenzhen Become Information Technology Co., Ltd. is a supplier of data collection equipment and solutions. There is a SQL injection vulnerability in the Road Transportation Employee Management Information System, which can be exploited by attackers to obtain sensitive information in the database...
SQL Injection Vulnerability in File System Profile Frontend Bi***.ashx Page
The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the frontend Bi.ashx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page
The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...
HRSALE The Ultimate HRM v1.0.2 - award_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: HRSALE The Ultimate HRM v1.0.2 - 'awardid' SQL Injection Exploit Author: 8bitsec CVE: CVE-2018-10256 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version:...
HRSALE The Ultimate HRM 1.0.2 - Authenticated Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: HRSALE The Ultimate HRM 1.0.2 - Authenticated Cross Site Scripting Exploit Author: 8bitsec CVE: CVE-2018-10259 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619...
HRSALE The Ultimate HRM 1.0.2 - CSV Injection
Exploit Title: HRSALE The Ultimate HRM 1.0.2 - CSV Injection Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10257 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version: 1.0.2 Tested on: Kali Linux 2.0 | Mac OS 10.13...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01395)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the LastName parameter in the index.php?user=ajax request...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01397)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the amount parameter in the index.php?user=additiondeduction request...
Server side request forgery (ssrf)
Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...
Directory traversal
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...
Cross site request forgery (csrf)
Biometric Shift Employee Management System has XSS via the expensename parameter in an index.php?user=expenses request...
Cross site request forgery (csrf)
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17994
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competencycriteria request...
Design/Logic Flaw
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...
CVE-2017-17992
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...
CVE-2017-17990
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
CVE-2017-17989
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...