PT-2026-95599

Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...

[SA12401] Smart Guest Book Database Content Disclosure Security Issue

TITLE: Smart Guest Book Database Content Disclosure Security Issue SECUNIA ADVISORY ID: SA12401 VERIFY ADVISORY: http://secunia.com/advisories/12401/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Smart Guest Book 2.x...