CVE-2022-3472

SourceCodester Human Resource Management System is affected by CVE-2022-3472 due to an SQL injection in the city.php component, triggered by manipulating the cityedit parameter. The issue is exploitable remotely and an exploit/PoC has been disclosed publicly. Affected versions are not specified i...

CVE-2022-3471

CVE-2022-3471 affects SourceCodester Human Resource Management System; the city.php component’s searccity parameter is vulnerable to SQL injection. A remote attacker can exploit this vulnerability, and public PoCs/exploits are referenced in the records. Multiple connected sources confirm the issu...

CVE-2022-3472: Improper Neutralization

A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attack may be launched remotely. The exploi...

PT-2022-22301 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System affected versions not specified Description: A critical issue affects the SourceCodester Human Resource Management System, specifically some unknown functionality of the file city.php. The...

CVE-2022-3470 SourceCodester Human Resource Management System getstatecity.php sql injection

A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file getstatecity.php. The manipulation of the argument sc leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2022-22299 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System affected versions not specified Description: A critical issue was found in the SourceCodester Human Resource Management System, affecting an unknown function of the file getstatecity.php. The...

SAP Business One Information Disclosure Vulnerability (CNVD-2022-56961)

SAP Business One is a product of SAP, a German company.SAP Business One is a set of enterprise management software. The software includes functions such as financial management, operations management and human resource management. SAP Business One has an information disclosure vulnerability that...

OrangeHRM Cross-Site Scripting Vulnerability (CNVD-2022-30440)

Orangehrm is a human resource management system HRM from Orangehrm, a US-based company. The system supports personnel information management, leave management, attendance management and recruitment management, etc. Orangehrm version 4.10 has a cross-site scripting vulnerability that can be...

Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2022-67480)

Ice Hrm is a human resource management system, and a cross-site scripting vulnerability exists in Ice Hrm version 30.0.0.OS. The vulnerability stems from the inability of the IceHRM website to effectively filter html tags in user input, which could be exploited by a logged-in attacker to steal...

SQL Injection Vulnerability in Panmicro e-cology (CNVD-2021-73908)

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management and...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-54731)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite. A...

Information leakage vulnerability in the human resources management system of Dongguan Zhiyue Software Technology Co.

Ltd. is a high-tech enterprise with independent intellectual property rights and its own brand, integrating R&D, production, sales and service. There is an information leakage vulnerability in the human resource management system of Dongguan Zhiyue Software Technology Co., Ltd, which can be...

Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2021-45759)

Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability by uploading a crafted file that will result in the execution of arbitrary web script or HTML...

Ice Hrm Cross-Site Scripting Vulnerability

Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability to execute arbitrary code via the /app/endpoint parameter...

MINTHCM Weak Password Requirement Vulnerability

MINTHCM is a MINTHCM open source application. A human resource management software. A weak password requirement vulnerability exists in the Create New User function in MintHCM RELEASE version 3.0.8, which can be exploited by an attacker to brute-force password cracking...

SQL Injection Vulnerability in Lansing Sky Human Resource Management System

Ltd. is a focus on human resources management software research, development and solutions for high-tech enterprises. Lanxin Tianji human resources management system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

Human Resource Information System 0.1 Remote Code Execution

Exploit Title: Human Resource Information System 0.1 - Remote Code Execution Unauthenticated Date: 04-05-2021 Exploit Author: Reza Afsahi Vendor Homepage: https://www.sourcecodester.com Software Link:...

SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24431)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

Profiling System For Human Resource Management 1.0 Cross Site Scripting

Exploit Title: Profiling System For Human Resource Management | Stored XSS Exploit Author: Richard Jones Date: 2021-03 Vendor Homepage: https://www.sourcecodester.com/php/11222/profiling-system-human-resource-management.html Software...

Profiling System For Human Resource Management 1.0 Cross Site Scripting Vulnerability

Exploit Title: Profiling System For Human Resource Management | Stored XSS Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/11222/profiling-system-human-resource-management.html Software...