PT-2024-26509 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the password parameter in the "/hrm/index.php" API endpoint. Recommendations: For...

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

CVE-2024-34222

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

CVE-2024-34220

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to unsecured privileges...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to SQL injection attacks...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Individual Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from the presence of insecure privileges...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to SQL injection attacks...

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

CVE-2024-34222

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

CVE-2024-34222

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

PT-2024-25752 · Unknown · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Human Resource Management System version 1.0 Description: The issue allows for SQL Injection via the searccountry parameter. Recommendations: For Sourcecodester Human Resource Management System version 1.0, consider restricting...

CVE-2024-34220

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

CVE-2024-34220

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

PT-2024-25750 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Human Resource Management System version 1.0 Description: The issue allows for SQL Injection via the leave parameter. Recommendations: For version 1.0, avoid using the leave parameter in affected API endpoints until the issue i...

CVE-2024-3415

A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file SuperadminDashboard/process/addbranchesprocess.php. The manipulation of the argument branchesname leads to cross site scripting. It...

CVE-2024-3415

CVE-2024-3415 concerns SourceCodester Human Resource Information System 1.0. vulnerability in the file Superadmin_Dashboard/process/addbranches_process.php where manipulating the parameter branches_name enables cross-site scripting. The issue is exploitable remotely (no user interaction required)...

CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting

A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...

CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting

A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...