CVE-2020-6114

The CVE-2020-6114 issue affects Glacies IceHRM v26.6.0.OS Admin Reports. TALOS details show an exploitable SQL injection caused by improper handling of the ob parameter used to build the ORDER BY clause in data retrieval paths (core/data.php → BaseService->getData, then Find). The vulnerabilit...

CVE-2020-6114

An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS Commit bb274de1751ffb9d09482fd2538f9950a94c510a . A specially crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this...

Vulnerability Spotlight: SQL injection vulnerability in Glacies IceHRM

Yuri Kramarz of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos researchers recently discovered that the Glacies' IceHRM software contains a vulnerability that could allow an adversary to inject SQL. IceHRM is a human resource management tool, allowing users to create...

Glacies IceHRM Admin Reports SQL injection Vulnerability

Summary An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS Commit bb274de1751ffb9d09482fd2538f9950a94c510a . A specially crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this...

IceHrm Cross-Site Request Forgery Vulnerability

IceHrm is a human resource management Hrm system. The system includes features such as employee management, leave management and payroll management. A cross-site request forgery vulnerability exists in IceHrm version 26.2.0. The vulnerability stems from the WEB application not adequately verifyin...

IceHrm Cross-Site Request Forgery Vulnerability (CNVD-2020-10603)

IceHrm is a human resource management Hrm system. The system includes features such as employee management, leave management and payroll management. A cross-site request forgery vulnerability exists in IceHrm version 26.2.0. The vulnerability stems from the WEB application not adequately verifyin...

IceHrm Information Disclosure Vulnerability

IceHrm is a free and open source human resource management system from IceHrm Sri Lanka. The system supports leave management, time tracking and more. A security vulnerability exists in IceHrm version 23.0.1.OS. No details of the vulnerability are provided at this time...

Cross site request forgery (csrf)

IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request...

CVE-2018-12420

IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request...

CVE-2018-12420

IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request...

CVE-2018-12420

IceHrm prior to version 23.0.1.OS is affected by a vulnerability related to risky handling of a hashed password in a request. The issue is described across multiple sources as a security exposure in IceHrm that could impact confidentiality (per CVSS) and is addressed by upgrading to 23.0.1.OS. Af...

CVE-2018-12420

IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request...

IceHrm < 7.2 Multiple Vulnerabilities - Active Check

IceHrm is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IceHrm 7.1 Multiple Vulnerabilities

IceHrm versions 7.1 and below suffer from cross site request forgery, cross site scripting, local file inclusion, and code execution via remote shell upload vulnerabilities. IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary...

IceHrm 7.1 - Multiple Vulnerabilities

IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted...

IceHrm 7.1 - Multiple Vulnerabilities

IceHrm 7.1 - Multiple Vulnerabilities IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has...

IceHrm 7.1 LFI / CSRF / XSS / Shell Upload

IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted...

IceHrm <=7.1 Multiple Vulnerabilities

Summary IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted cloud solution. Description IceHrm IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page:...