CVE-2024-35469

CVE-2024-35469 提交者：Kha Do Human Resource Management System 1.0 漏洞 SQL 注入 描述 SourceCodester Human Resource Management System 1.0 中的 /hrm/user/ 存在 SQL 注入漏洞，允许攻击者通过密码参数执行任意 SQL 命令。 受影响组件 /hrm/user/ 影响 攻击者可以使用载荷 'or'1'='1 无需凭证以管理员账户登录。 POC 匿名登录 源代码存在漏洞 视频...

CVE-2024-34223

基于PHP和MySQL的人力资源管理系统项目免费源码 提交者：Kha Do 漏洞 不安全的权限 描述 SourceCodester 人力资源管理系统 1.0 中 /hrm/leaverequest.php 存在不安全的权限漏洞，攻击者可借此批准或拒绝请假单。 受影响组件 路径 URL：/hrm/leaverequest.php 参数：?msg= 、?id= 影响 普通用户可自行批准或拒绝请假单，此操作原本不被允许。 id： 批准请假单。 msg： 拒绝请假单。 PoC...

CVE-2024-34222

人力资源管理系统 1.0 提交者：Kha Do 漏洞 SQL注入 描述 SourceCodester人力资源管理系统1.0中的/hrm/country.php存在SQL注入漏洞，允许攻击者通过searccountry 参数执行任意SQL命令。 受影响组件 路径 URL: /hrm/country.php 参数: & searccountry=在此处注入 影响 此漏洞允许攻击者通过searccountry 参数执行任意SQL命令。 POC 当使用错误条件 ' and '1'='2' 搜索国家时，没有返回结果： 并且，当使用错误条件 ' and '1'='1' 搜索国家时，所有结果都返回：...

CVE-2024-34221

Proyecto de Sistema de Gestión de Recursos Humanos en PHP y MySQL Código Fuente Gratuito Remitente: Kha Do Vulnerabilidad Permiso inseguro Descripción Existe una vulnerabilidad de permiso inseguro en /hrm/controller/ccity.php?positionedit= en SourceCodester Human Resource Management System 1.0, q...

EUVD-2024-34700

Malicious code in bioql PyPI...

CVE-2023-3391

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-35469

A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter...

CVE-2024-35468

CVE-2024-35468 affects SourceCodester Human Resource Management System v1.0. A SQL injection flaw exists in the /hrm/index.php endpoint, exploitable through the password parameter to execute arbitrary SQL commands. Root cause: improper handling/sanitization of input to the SQL query in that API p...

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

CVE-2024-34220

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

CVE-2024-34223

Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket...

CVE-2024-34220

CVE-2024-34220 affects Sourcecodester Human Resource Management System 1.0 and is described as a SQL Injection via the 'leave' parameter. Public PoC/exploit code exists (e.g., on GitHub), showing parameterized input being unsafely handled and allowing sleep-based timing tricks. Red Hat/PT-Securit...

Sql injection

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The...

CVE-2022-4278

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employeeadd.php. The manipulation of the argument empid leads to sql injection. The attack may be initiated remotely. The...

CVE-2022-4279

A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely...

CVE-2022-4278

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employeeadd.php. The manipulation of the argument empid leads to sql injection. The attack may be initiated remotely. The...

CVE-2022-4273

A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hrm/controller/employee.php of the component Content-Type Handler. The manipulation of the argument pfimg leads to...

Out-of-bounds

A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hrm/controller/employee.php of the component Content-Type Handler. The manipulation of the argument pfimg leads to...

CVE-2022-4273 SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hrm/controller/employee.php of the component Content-Type Handler. The manipulation of the argument pfimg leads to...

CVE-2022-4279 SourceCodester Human Resource Management System employeeview.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely...