CVE-2024-34222

人力资源管理系统 1.0 提交者：Kha Do 漏洞 SQL注入 描述 SourceCodester人力资源管理系统1.0中的/hrm/country.php存在SQL注入漏洞，允许攻击者通过searccountry 参数执行任意SQL命令。 受影响组件 路径 URL: /hrm/country.php 参数: & searccountry=在此处注入 影响 此漏洞允许攻击者通过searccountry 参数执行任意SQL命令。 POC 当使用错误条件 ' and '1'='2' 搜索国家时，没有返回结果： 并且，当使用错误条件 ' and '1'='1' 搜索国家时，所有结果都返回：...

CVE-2018-25416 AiOPMSD Final 1.0.0 SQL Injection via country.php

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the country parameter. Attackers can send GET requests to country.php with crafted SQL payloads in the country parameter to extrac...

CVE-2025-40684

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php...

Campsite 2.6.1 Country.php g_documentRoot Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...