6189 matches found
CVE-2022-0935: Improper Encoding or Escaping of Output
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...
PT-2022-13536 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat/livehelperchat versions prior to 3.97 Description: The issue concerns a Host Header injection in the password reset functionality. This problem is associated with the GitHub repository livehelperchat/livehelperchat...
OrangeHRM input validation error vulnerability
Orangehrm is a human resource management system HRM from Orangehrm, Inc. The system supports personnel information management, leave management, attendance management and recruitment management, etc. Orangehrm version 4.10 has an input validation error vulnerability, which stems from vulnerabilit...
CVE-2022-27109
OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
Design/Logic Flaw
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
CVE-2022-27110
OrangeHRM 4.10 is reported vulnerable to a Host header injection redirect via the viewPersonalDetails endpoint. The issue stems from input handling that allows HTTP Host header manipulation to redirect users to an unintended URL, potentially exposing or guiding users to a personal-details interfa...
PT-2022-18228
Name of the Vulnerable Software and Affected Versions OrangeHRM version 4.10 Description The issue concerns a Host header injection redirect via the "viewPersonalDetails" endpoint. This allows for potential redirection attacks. Recommendations For OrangeHRM version 4.10, as a temporary workaround...
PT-2022-18226
Name of the Vulnerable Software and Affected Versions OrangeHRM version 4.10 Description The issue is related to a Referer header injection redirect. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
Orangehrm has a vulnerability in input validation.
Orangehrm is a human resource management system HRM from Orangehrm USA. The system supports personnel information management, leave management, time and attendance management and recruitment management, etc. Orangehrm version 4.10 has a Referer header injection redirection vulnerability, no...
CVE-2022-27109: URL Redirection to Untrusted Site
OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability...
Orangehrm has a vulnerability in input validation.
Orangehrm is a human resource management system HRM from Orangehrm, Inc. The system supports personnel information management, leave management, attendance management and recruitment management, etc. Orangehrm version 4.10 has an input validation error vulnerability, which stems from vulnerabilit...
CVE-2022-27110: URL Redirection to Untrusted Site
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint...
gateway: radosgw: CRLF injection
A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when makin...
CVE-2022-24181
Cross-site scripting XSS via Host Header injection in PKP Open Journals System 2.4.8 = 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header...