CVE-2024-34222

Human Resource Management System 1.0 Einsender: Kha Do Schwachstelle SQL-Injection Beschreibung Die SQL-Injection-Schwachstelle in /hrm/country.php in SourceCodester Human Resource Management System 1.0 ermöglicht es Angreifern, beliebige SQL-Befehle über die searccountry -Parameter auszuführen...

CVE-2024-34221

Projekt eines Personalverwaltungssystems in PHP und MySQL – Kostenloser Quellcode Einsender: Kha Do Schwachstelle Unsichere Berechtigungen Beschreibung Es gibt eine Schwachstelle in der unsicheren Berechtigung in /hrm/controller/ccity.php?positionedit= im SourceCodester Human Resource Management...

CVE-2024-34223

Human Resource Management System Project in PHP and MySQL Free Source Code Einreicher: Kha Do Schwachstelle Unsichere Berechtigung Beschreibung Die Schwachstelle „Unsichere Berechtigung" in /hrm/leaverequest.php im SourceCodester Human Resource Management System 1.0 ermöglicht es Angreifern,...

CVE-2024-35469

CVE-2024-35469 Submetido por: Kha Do Human Resource Management System 1.0 Vulnerabilidade Injeção de SQL Descrição Vulnerabilidade de injeção de SQL em /hrm/user/ no SourceCodester Human Resource Management System 1.0 permite que atacantes executem comandos SQL arbitrários por meio dos parâmetros...

CVE-2019-15813

CVE-2019-15813 Dieser Container wurde erstellt, um CVE-2019-15813 Sentrifugo zu erklären und zu demonstrieren. Sentrifugo V3.2 Sentrifugo ist ein Personalverwaltungssystem. Installation docker-compose up Standard-Anmeldedaten zum Testen ----Super-Admin---- Benutzername : empp0001 Passwort :...

CVE-2022-46104---POC

CVE-2022-46104 https://www.sourcecodester.com/ XSS wurde auf der Seite loginn.php des Projekts Human Resource Management System entdeckt: Ausführungspayload: http://localhost/hrm/loginn.php?msg=%3Cscript%3Ealert%27XSS%27%3C/script%3E...

CVE-2026-70560

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

CVE-2026-70560

CVE-2026-70560 affects Ultimate POS (Stock Management & Point of Sale). A stored XSS vulnerability allows low-privileged authenticated users to inject arbitrary HTML/script by submitting a malicious payload in the user first-name field during account creation. When such a user with a low-privileg...

CVE-2026-70560 Ultimate POS Stored XSS via First Name Field in Leave Notifications

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

EUVD-2026-57170

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

CVE-2026-70560

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

PT-2026-71057

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

EUVD-2026-46977

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: Time Accounting and HRM Base. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-9237

The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

EUVD-2026-42566

The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-9237 Employee, Leave and Recruitment Management System <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Job Deletion via crewhrm_singleJobAction AJAX Action

The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-9237

Summary: CVE-2026-9237 affects the WordPress plugin “Crew HRM” (Employee, Leave and Recruitment Management System). All versions up to 1.2.2 are vulnerable to an authorization bypass due to improper access verification. Authenticated users with subscriber-level access or higher can delete, archiv...

CVE-2026-13525

A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employeemodel.php of the component UpdateEarnLeave Endpoint. The manipulation of the argument emid results in sql injection. The attack can...

CVE-2026-27351

Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crew HRM: from n/a through 1.2.2...

CVE-2026-27351 WordPress Crew HRM plugin <= 1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sekander Badsha Crew HRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crew HRM: from n/a through 1.2.2...