Horilla Access Control Vulnerability

Horilla is a free open-source human resources software developed by Horilla Company. Versions of Horilla from 1.4.0 to 1.5.0 contained an access control vulnerability. This vulnerability stemmed from insufficient validation of the employeeid parameter on the server side, allowing any authenticate...

Horilla 安全漏洞

Horilla is a free and open source human resources software from Horilla, Inc. A security vulnerability exists in Horilla version 1.3.0 that stems from the unsafe use of the eval function for user-controlled query parameters, which could lead to remote code execution...