CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573

The CVE-2019-9573 entry concerns the WordPress WP Human Resource Management plugin, specifically versions prior to 2.2.6. The public description states that the plugin mishandles leave applications, indicating a logic/authorization or data-handling issue in how leave requests are processed. CVSS ...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

PT-2019-19718

Name of the Vulnerable Software and Affected Versions WP Human Resource Management plugin versions prior to 2.2.6 Description The issue is related to the mishandling of leave applications in the WP Human Resource Management plugin for WordPress. Recommendations For versions prior to 2.2.6, update...

PT-2019-19719

Name of the Vulnerable Software and Affected Versions WP Human Resource Management plugin versions prior to 2.2.6 Description The issue arises from the lack of proper role-based access control in the WP Human Resource Management plugin, allowing leave modifications to occur outside of the intende...

CVE-2019-9574: Missing Authorization

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573: Undefined Security Weakness

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

Adrenalin HRMS Software Cross-Site Scripting Vulnerability (CNVD-2018-26800)

Adrenalin HRMS Software is a human resource management system from Adrenalin eSystems India. A cross-site scripting vulnerability exists in Adrenalin HRMS Software version 5.4.0, which can be exploited by a remote attacker to execute JavaScript code by sending the 'prntFrmName' or '...

CVE-2018-12234

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter...

HRSALE The Ultimate HRM SQL Injection Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A SQL injection vulnerability exists in HRSALE The Ultimate HRM version 1.0.2. The vulnerability can be exploited by remote attackers to directly alter SQL query statements with the 'awardid' parameter...

HRSALE The Ultimate HRM Local File Inclusion Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A local file inclusion vulnerability exists in HRSALE The Ultimate HRM version 1.0.2. A remote attacker can exploit this vulnerability by sending a specially crafted URL request to obtain sensitive information and execute...

Cross-site Scripting Vulnerability in eHR Human Resource Management System

The whole eHR human resource management system is a series of enterprise integrated management software produced by the whole software, which provides excellent software solutions for the development and management of enterprise personnel resources. A cross-site scripting vulnerability exists in...

CVE-2017-14848

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

CVE-2017-14848: Improper Neutralization of Special Elements used in an SQL Command

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

CVE-2017-14848

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

CVE-2017-14848

The CVE-2017-14848 entry corresponds to the WordPress WPHRM plugin (WordPress) vulnerability: authenticated SQL injection via the employee_id parameter, affecting version 1.0 and earlier. Technical details across connected sources confirm the issue arises from unsafely handling the employee_id in...

PT-2017-13725

Name of the Vulnerable Software and Affected Versions WPHRM Human Resource Management System for WordPress version 1.0 Description The issue allows SQL Injection via the employee id parameter. Recommendations For WPHRM Human Resource Management System for WordPress version 1.0, avoid using the...