CVE-2011-5259

CVE-2011-5259 describes a SQL injection in OrangeHRM before 2.6.11.2, caused by unsafely handling the id parameter in lib/controllers/CentralController.php. Public records from NVD/NVD-derived sources confirm that remote attackers could execute arbitrary SQL commands via that parameter, with impa...