CVE-2022-26588

A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...

CVE-2022-26588

A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...

PT-2022-17943

Name of the Vulnerable Software and Affected Versions IceHrm version 31.0.0.OS Description A Cross-Site Request Forgery CSRF issue allows attackers to delete arbitrary users or achieve account takeover via the "app/service.php" URI. Recommendations For IceHrm version 31.0.0.OS, as a temporary...

CVE-2022-26588: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...