CVE-2019-18221

CoreHR Core Portal before 27.0.7 allows stored XSS...

EUVD-2019-8021

Malware in sbrugna...

EUVD-2019-11509

Malware in sbrugna...

CVE-2019-25064

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

CVE-2019-25064

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

CVE-2019-25064

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

Cross site request forgery (csrf)

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

CVE-2019-25064 CoreHR Core Portal cross-site request forgery

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

CVE-2019-25064 CoreHR Core Portal cross-site request forgery

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

CVE-2019-25064

CVE-2019-25064 affects CoreHR Core Portal up to version 27.0.7. The issue is a cross-site request forgery (CSRF) in an unknown function that allows remote triggering of actions without proper CSRF validation. Several sources confirm the vulnerability and indicate that upgrading to version 27.0.8 ...

CoreHR Core Portal 跨站请求伪造漏洞

CoreHR Core Portal is a Human Resources Management System. A cross-site request forgery vulnerability exists in CoreHR Core Portal 27.0.7 and prior versions, which stems from the application lacking cross-site request forgery validation...

CVE-2019-18221

CoreHR Core Portal before 27.0.7 allows stored XSS...

CVE-2019-18221

CoreHR Core Portal before 27.0.7 allows stored XSS...

Cross site scripting

CoreHR Core Portal before 27.0.7 allows stored XSS...

CVE-2019-18221

Vulnerability CVE-2019-18221 affects CoreHR Core Portal prior to version 27.0.7, where a stored XSS flaw exists in the web app. The underlying issue is lack of proper validation/exposure of client-side data, enabling an attacker to inject and execute script in the user’s browser. Public sources (...

CVE-2019-18221

CoreHR Core Portal before 27.0.7 allows stored XSS...

CoreHR Core Portal Cross-Site Scripting Vulnerability

CoreHR Core Portal is a human resource management system. A cross-site scripting vulnerability exists in CoreHR Core Portal versions prior to 27.0.7. The vulnerability stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execut...