212 matches found
Sentrifugo CMS 3.2 Cross Site Scripting
Document Title: =============== Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2229 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 22...
Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability
Document Title: =============== Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2229 Release Date: ============= 2020-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 22...
Sapplica Sentrifugo SQL Blind Bets Vulnerability
Sentrifugo is an intuitive and easy to use open source human resource management software. Sapplica Sentrifugo 3.2 suffers from an SQL blind injection vulnerability. An attacker can exploit this vulnerability to read sensitive information from a database used by the application via the...
CVE-2020-10218
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
CVE-2020-10218
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
Sql injection
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
CVE-2020-10218
The CVE-2020-10218 entry pertains to Sapplica Sentrifugo 3.2, where a Blind SQL Injection vulnerability exists in the index.php/holidaygroups/add id parameter caused by the HolidaydatesController.php addAction function. The issue allows an attacker to read data from the application’s database. Pu...
CVE-2020-10218
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
CVE-2020-10218: Improper Neutralization of Special Elements used in an SQL Command
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...
Sentrifugo HRMS 3.2 - id SQL Injection
Sentrifugo HRMS 3.2 - id SQL Injection Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Website: Date: 2020-03-06 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched...
Sentrifugo HRMS 3.2 - (id) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version: unpatched Category: Web...
Sentrifugo HRMS 3.2 - 'id' SQL Injection
Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Website: Date: 2020-03-06 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version: unpatched Category: Web Applicatio...
Sentrifugo HRMS 3.2 SQL Injection
Exploit Title: Sentrifugo HRMS 3.2 - 'id' SQL Injection Exploit Author: minhnb Website: Date: 2020-03-06 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version: unpatched Category: Web Applicatio...
CVE-2019-16059
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...
CVE-2019-16059
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...
Cross site request forgery (csrf)
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...
CVE-2019-16059
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...
CVE-2019-16059
CVE-2019-16059 affects Sentrifugo 3.2 and is described across multiple sources (NVD, Red Hat, CVE lists) as lacking CSRF protection, which could allow an attacker to trick an administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page. The connected docu...
CVE-2019-16059: Cross-Site Request Forgery (CSRF)
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page...