ICE HRM 23.0 - Multiple Vulnerabilities

=========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link: https://sourceforge.net/projects/icehrm/ Version: v23.0...

ICE HRM 23.0 - Multiple Vulnerabilities

ICE HRM 23.0 - Multiple Vulnerabilities =========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link:...

WordPress WP Human Resource Management plugin has a security vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Human Resource Management plugin is a human resource management plugin used in it. A security vulnerability exists in the WordPress WP...

WordPress WP Human Resource Management plugin has a security vulnerability (CNVD-2019-28868)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Human Resource Management plugin is a human resource management plugin used in it. A security vulnerability exists in WordPress WP Huma...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

Code injection

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9573

The CVE-2019-9573 entry concerns the WordPress WP Human Resource Management plugin, specifically versions prior to 2.2.6. The public description states that the plugin mishandles leave applications, indicating a logic/authorization or data-handling issue in how leave requests are processed. CVSS ...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

Adrenalin HRMS Software Cross-Site Scripting Vulnerability (CNVD-2018-26800)

Adrenalin HRMS Software is a human resource management system from Adrenalin eSystems India. A cross-site scripting vulnerability exists in Adrenalin HRMS Software version 5.4.0, which can be exploited by a remote attacker to execute JavaScript code by sending the 'prntFrmName' or '...

CVE-2018-12234

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter...

HRSALE The Ultimate HRM Local File Inclusion Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A local file inclusion vulnerability exists in HRSALE The Ultimate HRM version 1.0.2. A remote attacker can exploit this vulnerability by sending a specially crafted URL request to obtain sensitive information and execute...

HRSALE The Ultimate HRM SQL Injection Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A SQL injection vulnerability exists in HRSALE The Ultimate HRM version 1.0.2. The vulnerability can be exploited by remote attackers to directly alter SQL query statements with the 'awardid' parameter...

Cross-site Scripting Vulnerability in eHR Human Resource Management System

The whole eHR human resource management system is a series of enterprise integrated management software produced by the whole software, which provides excellent software solutions for the development and management of enterprise personnel resources. A cross-site scripting vulnerability exists in...

CVE-2017-14848

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

CVE-2017-14848

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

CVE-2017-14848

The CVE-2017-14848 entry corresponds to the WordPress WPHRM plugin (WordPress) vulnerability: authenticated SQL injection via the employee_id parameter, affecting version 1.0 and earlier. Technical details across connected sources confirm the issue arises from unsafely handling the employee_id in...