SQL Injection Vulnerability in Human Resource Network Management System of Hunan Qingguo Software Co.

Hunan Qingguo Software Co., Ltd. human resources network management system is mainly used in the field of university education management WEB system. The product exists /rlweb/data/rule.aspx?id=Page there is a SQL injection vulnerability, the injection parameter is: id Attackers can use the...

Cezanne HR for Mobile - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Cezanne HR for Mobile published at the 'play' market has multiple vulnerabilities...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2016-02557)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability exists in the Fusion HR Talent...

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

CVE-2016-0407

CVE-2016-0407 affects Oracle PeopleSoft Enterprise HCM (Fusion HR Talent Integration) in PeopleSoft Products v9.1 and v9.2. The vulnerability is described as an unspecified issue that allows remote authenticated users to access data and compromise confidentiality. Affected component/area: Fusion ...

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

PT-2016-4188

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 9.1 through 9.2 Description The issue affects confidentiality and can be exploited by remote authenticated users through vectors related to Fusion HR Talent Integration in the PeopleSoft Enterprise HCM...

CVE-2016-0407: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

RuvarHRM 人力资源管理系统 accounts_list.aspx SQL注入

exp: http://oa.hnlxbus.com:8081/RuvarHRM/admin/accountslist.aspx?udepartmentid=1%27and%201%3Dconvert%28int%2C%20CHAR%28126%29%20%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%2bdbname%28%29%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%29--...

hr-iNFO - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application hr-iNFO published at the 'play' market has multiple vulnerabilities...

用友NC人力资源管理（e-HR） /hrss/rm/PositionDetail.jsp SQL注入漏洞

No description provided by source...

IRS Issues Alert for Tax Phishing Scheme

The Internal Revenue Service IRS has issued a news release addressing a new spear phishing scheme targeting payroll and human resource professionals. In this scheme, cybercriminals pose as company executives requesting personal information on employees. US-CERT encourages users and administrators...

CVE-2016-0537

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Person...

Ruvar人力资源管理系统select_baseinfo.aspx bt_name参数SQL注入漏洞

No description provided by source...

用友NC综合办公系统 /epp/html/nodes/upload/SupdocDo.jsp SQL注入漏洞

用友NC综合办公系统SQL注入漏洞，可同时影响多个办公系统HR资源管理系统、UFO报表系统等的数据库 注入链接：/epp/detail/publishinfomore.jsp?pkinfotype= 注入参数：pkinfotype 必须先访问/epp/index.jsp后产生cookie才能进行SQL注入 测试案例： http://nc.xhlbdc.com 访问首页产生cookie： http://nc.xhlbdc.com/epp/index.jsp...

hr-tv.ru XSS vulnerability

Vulnerable URL: http://hr-tv.ru/find/?sm=x=x=z-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7841222 Google Pagerank| 3 VIP website status:| No Check hr-tv.ru SSL connection:|...

UNIT4TETA TETA WEB - Authorization Bypass vulnerability

Exploit for php platform in category web applications Title: UNIT4TETA TETA WEB - Authorization Bypass vulnerability Author: Lukasz Miedziński Date: 08. January 2015 CVE: CVE-2015-1173 Affected software : =================== UNIT4TETA TETA WEB 22.62.3.4 - newest version Older versions are probabl...

Threat Outbreak Alert RuleID16743: Email Messages Distributing Malicious Software on July 16, 2015

Medium Alert ID: 40020 First Published: 2015 July 17 21:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16743 may contain the following files: Name | Siz...