hr-recruit.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-524730 Description| Value ---|--- Affected Website:| hr-recruit.asus.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

apps.hr.emory.edu XSS vulnerability

Open Bug Bounty ID: OBB-451698 Description| Value ---|--- Affected Website:| apps.hr.emory.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

International Islamic University Chittagong: Default credentials on http://119.18.148.140/hrd/

Hello, When the mentioned URL is opened, the user is presented with a login form that logs them into the "HR & Payroll" system of the university. The issue here is that the credentials used are the application's default credentials, which are mentioned here...

CVE-2017-14848

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

Ultimate HR System <= 1.2 - Directory Traversal / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd...

Ultimate HR System 1.2 Cross Site Scripting / Directory Traversal

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

viessmann.hr XSS vulnerability

Open Bug Bounty ID: OBB-270014 Description| Value ---|--- Affected Website:| viessmann.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

typhon.gmu.edu XSS vulnerability

Vulnerable URL: https://typhon.gmu.edu/HR/mymasonhr/index.php?action=login=appchoose.php==1"...

Unauthorized Access Vulnerability in Huatian Power OA8000 System

Huatian Power OA8000 system is a collaborative OA office system. An unauthorized access vulnerability exists in the demo.oa8000.com/OAapp/bfapp/buffalo/hrApplicationFormService page of the Huatian Power OA8000 system. An attacker is allowed to gain access to obtain sensitive information...

airservcorp.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://airservcorp.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

cathaybankcareers.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://cathaybankcareers.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

mcd.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://mcd.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

ohiochristianuniversity.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://ohiochristianuniversity.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

monsterhires.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://monsterhires.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

photobox.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://photobox.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

picwic.mua.hrdepartment.com XSS vulnerability

Open Bug Bounty ID: OBB-210818 Description| Value ---|--- Affected Website:| picwic.mua.hrdepartment.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sagemcom.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://sagemcom.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

yves-rocher-franchise.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://yves-rocher-franchise.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

victoriassecretcanada-pinkcanada.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://victoriassecretcanada-pinkcanada.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...