EUVD-2013-2444

Malware in sbrugna...

EUVD-2013-2445

Malware in sbrugna...

CVE-2013-2499

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'usermanager.php' via spoofing a cookie...

Authentication flaw

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'usermanager.php' via spoofing a cookie...

CVE-2013-2499

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'usermanager.php' via spoofing a cookie...

CVE-2013-2499

CVE-2013-2499 affects SimpleHRM 2.3 and earlier. The vulnerability is an authentication bypass where remote attackers can bypass login in the file user_manager.php by spoofing a cookie. The description explicitly states the root cause as cookie spoofing enabling bypass of authentication, which co...

PT-2020-7390

Name of the Vulnerable Software and Affected Versions: SimpleHRM versions 2.3 and earlier Description: The issue allows remote attackers to bypass the authentication process in the 'user manager.php' file by spoofing a cookie. Recommendations: For SimpleHRM versions 2.3 and earlier, update to a...

CVE-2013-2499: Exposure of Sensitive Information to an Unauthorized Actor

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'usermanager.php' via spoofing a cookie...

SimpleHRM 'username' Parameter SQL Injection Vulnerability

SimpleHRM is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2498

SQL injection vulnerability in the login page in flexycms/modules/user/usermanager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin...

Sql injection

SQL injection vulnerability in the login page in flexycms/modules/user/usermanager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin...

CVE-2013-2498

SQL injection vulnerability in the login page in flexycms/modules/user/usermanager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin...

CVE-2013-2498

CVE-2013-2498 affects SimpleHRM (versions 2.3, 2.2 and earlier) and is caused by an SQL injection in the login page (flexycms/modules/user/user_manager.php). The vulnerability allows remote attackers to manipulate the username field passed to index.php/user/setLogin, enabling arbitrary SQL comman...

CVE-2013-2498: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the login page in flexycms/modules/user/usermanager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin...

PT-2014-2588

Name of the Vulnerable Software and Affected Versions SimpleHRM versions 2.3, 2.2, and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter to "index.php/user/setLogin". This is a SQL injection vulnerability in the login page,...