790 matches found
ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]
No description provided by source. Title: ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass Date: 12/12/2009 Author: bi0 Software Link: http://www.zeecareers.com/ Version: 2x CVE : Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...
ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting Authentication Bypass)
ZeeCareers 2.x - PHP HR Manager Website Cross-Site Scripting Authentication Bypass Title: ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass Date: 12/12/2009 Author: bi0 Software Link: http://www.zeecareers.com/ Version: 2x CVE : Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \...
ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting / Authentication Bypass)
Title: ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass Date: 12/12/2009 Author: bi0 Software Link: http://www.zeecareers.com/ Version: 2x CVE : Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...
How to Protect Your Resume From Identity Theft
“Job candidates are willing in this market to give any information they can that would help them get a job,” said Ellen B. Vance, an HR consultant and auditor who advises companies on how to safeguard applicant and employee information. The instinct is natural, but it can leave you vulnerable to...
Q2 Solutions ConnX - SQL Injection Vulnerability
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 03-Apr-2009 Software: Q2 Solutions - ConnX http://www.q2solutions.com.au/ "ConnX is a ready built internet/intranet solution that empowers employees and management to view and update HR and Payroll...
ConnX SQL Injection
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 03-Apr-2009 Software: Q2 Solutions - ConnX http://www.q2solutions.com.au/ "ConnX is a ready built internet/intranet solution that empowers employees and management to view and update HR and Payroll...
CVE-2008-5822: Undefined Security Weakness
Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service memory consumption and browser hang via a long CLASS attribute in an HR element in an HTML document...
CVE-2002-2348
Cross-site scripting XSS vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter...
CVE-2002-2348
The CVE-2002-2348 issue affects Authoria HR’s athcgi.exe and is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the command parameter. The vulnerability is sourced from multiple records (NVD, CVE lists) and mirrors in Red Hat and ...
CVE-2002-2348: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter...
CVE-2006-6524
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname UserName parameter...
CVE-2006-6525
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6524
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname UserName parameter...
CVE-2006-6525
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6524
CVE-2006-6524 is a SQL injection vulnerability in EzHRS HR Assist prior to or including 1.05, occurring in vdateUsr.asp through the Uname (UserName) parameter. The issue arises from improper handling of user input, allowing remote attackers to execute arbitrary SQL commands. Public references inc...
CVE-2006-6525
CVE-2006-6525 affects EzHRS HR Assist 1.05 and earlier. The vulnerability is an SQL injection in vdateUsr.asp that allows remote attackers to execute arbitrary SQL commands via the password parameter. The connected documents confirm the existence of a remote, unauthenticated impact with potential...
CVE-2006-6525: Undefined Security Weakness
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6524: Undefined Security Weakness
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname UserName parameter...
HR Assist <= 1.05 (vdateUsr.asp) Remote Login ByPass Vulnerability
Exploit for unknown platform in category web applications ================================================================== HR Assist = 1.05 vdateUsr.asp Remote Login ByPass Vulnerability ================================================================== Title : HR Assist = 1.05 vdateUsr.asp...
HR Assist <= 1.05 (vdateUsr.asp) Remote Login ByPass Vulnerability
No description provided by source. Title : HR Assist = 1.05 vdateUsr.asp Remote Login ByPass SQL Injection Author : ajann Page : http://www.ezhrs.com Contact : : $$$ : $45 Example: http://target/path/ UserName: ' union select 0,0,0,0,0,0,0,0,0,0,0,0,0 from admin """"""""""""""""""""" ajann,Turkey...