CVE-2024-35469

CVE-2024-35469 提交者：Kha Do Human Resource Management System 1.0 漏洞 SQL 注入 描述 SourceCodester Human Resource Management System 1.0 中的 /hrm/user/ 存在 SQL 注入漏洞，允许攻击者通过密码参数执行任意 SQL 命令。 受影响组件 /hrm/user/ 影响 攻击者可以使用载荷 'or'1'='1 无需凭证以管理员账户登录。 POC 匿名登录 源代码存在漏洞 视频...

CVE-2019-15813

CVE-2019-15813 此容器用于解释并演示 CVE-2019-15813（Sentrifugo 的工作原理） Sentrifugo V3.2 Sentrifugo 是一个人力资源管理系统 如何安装 docker-compose up 默认测试凭据 ----超级管理员---- 用户名：empp0001 密码：5faa7bdf3d7af ---员工---- 用户名：EMPP123 密码：bygedupub --反向 PHP Shell-- 解压 resume.zip（因 Windows Defender 可能删除该文件而打包） 编辑 IP 地址和端口...

CVE-2024-34223

基于PHP和MySQL的人力资源管理系统项目免费源码 提交者：Kha Do 漏洞 不安全的权限 描述 SourceCodester 人力资源管理系统 1.0 中 /hrm/leaverequest.php 存在不安全的权限漏洞，攻击者可借此批准或拒绝请假单。 受影响组件 路径 URL：/hrm/leaverequest.php 参数：?msg= 、?id= 影响 普通用户可自行批准或拒绝请假单，此操作原本不被允许。 id： 批准请假单。 msg： 拒绝请假单。 PoC...

CVE-2024-34221

基于 PHP 和 MySQL 的人力资源管理系统项目免费源代码 提交者：Kha Do 漏洞类型 权限设置不当 描述 SourceCodester 人力资源管理系统 1.0 中的 /hrm/controller/ccity.php?positionedit= 存在权限设置不当漏洞，攻击者可访问普通用户无权访问的功能。 受影响组件 路径 URL：/hrm/controller/ccity.php?positionedit= 参数：position.php 影响 攻击者可使用普通账户添加新职位，而普通用户本无权执行此操作。 POC...

CVE-2022-46104---POC

CVE-2022-46104 https://www.sourcecodester.com/ 在人力资源管理系统项目的loginn.php页面中发现了XSS漏洞： 执行payload： http://localhost/hrm/loginn.php?msg=%3Cscript%3Ealert%27XSS%27%3C/script%3E...

CVE-2024-34222

人力资源管理系统 1.0 提交者：Kha Do 漏洞 SQL注入 描述 SourceCodester人力资源管理系统1.0中的/hrm/country.php存在SQL注入漏洞，允许攻击者通过searccountry 参数执行任意SQL命令。 受影响组件 路径 URL: /hrm/country.php 参数: & searccountry=在此处注入 影响 此漏洞允许攻击者通过searccountry 参数执行任意SQL命令。 POC 当使用错误条件 ' and '1'='2' 搜索国家时，没有返回结果： 并且，当使用错误条件 ' and '1'='1' 搜索国家时，所有结果都返回：...

CVE-2026-94150

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94151

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94149

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

CVE-2026-94151 Omega Solution HRM OS Role Permission API permission missing authentication

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94151 Omega Solution HRM OS Role Permission API permission missing authentication

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94151

A missing authentication vulnerability in Omega Solution HRM OS (up to version 20260717 ) affects the Role Permission API at the endpoint /role-permission/permission. Manipulating the roleId argument allows an unauthenticated remote attacker to bypass authentication controls, resulting in a low c...

EUVD-2026-83864

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94150 Omega Solution HRM OS SVG File Upload view cross site scripting

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94150 Omega Solution HRM OS SVG File Upload view cross site scripting

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94150

CVE-2026-94150 is a cross-site scripting (XSS) flaw in Omega Solution HRM OS versions up to 20260717 , located in an unknown function of the SVG File Upload component at /media/view/. The attack can be initiated remotely but requires high privileges and user interaction , resulting in a low integ...

EUVD-2026-83863

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94149 Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injection

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

EUVD-2026-83859

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

CVE-2026-94149 Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injection

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...