CVE-2024-34221

基于 PHP 和 MySQL 的人力资源管理系统项目免费源代码 提交者：Kha Do 漏洞类型 权限设置不当 描述 SourceCodester 人力资源管理系统 1.0 中的 /hrm/controller/ccity.php?positionedit= 存在权限设置不当漏洞，攻击者可访问普通用户无权访问的功能。 受影响组件 路径 URL：/hrm/controller/ccity.php?positionedit= 参数：position.php 影响 攻击者可使用普通账户添加新职位，而普通用户本无权执行此操作。 POC...

CVE-2024-35469

CVE-2024-35469 Enviado por: Kha Do Human Resource Management System 1.0 Vulnerabilidad Inyección SQL Descripción La vulnerabilidad de inyección SQL en /hrm/user/ en SourceCodester Human Resource Management System 1.0 permite a los atacantes ejecutar comandos SQL arbitrarios a través de los...

CVE-2022-46104---POC

CVE-2022-46104 https://www.sourcecodester.com/ Se ha descubierto XSS en la página loginn.php del Proyecto Human Resource Management System: Payload de ejecución: http://localhost/hrm/loginn.php?msg=%3Cscript%3Ealert%27XSS%27%3C/script%3E...

CVE-2024-34222

人力资源管理系统 1.0 提交者：Kha Do 漏洞 SQL注入 描述 SourceCodester人力资源管理系统1.0中的/hrm/country.php存在SQL注入漏洞，允许攻击者通过searccountry 参数执行任意SQL命令。 受影响组件 路径 URL: /hrm/country.php 参数: & searccountry=在此处注入 影响 此漏洞允许攻击者通过searccountry 参数执行任意SQL命令。 POC 当使用错误条件 ' and '1'='2' 搜索国家时，没有返回结果： 并且，当使用错误条件 ' and '1'='1' 搜索国家时，所有结果都返回：...

CVE-2019-15813

CVE-2019-15813 Este contenedor fue creado para explicar y demostrar cómo funciona CVE-2019-15813 Sentrifugo Sentrifugo V3.2 Sentrifugo es un Sistema de Gestión de Recursos Humanos Cómo instalar docker-compose up Credenciales por defecto para probar ----Super Administrador---- Nombre de usuario :...

CVE-2024-34223

基于PHP和MySQL的人力资源管理系统项目免费源码 提交者：Kha Do 漏洞 不安全的权限 描述 SourceCodester 人力资源管理系统 1.0 中 /hrm/leaverequest.php 存在不安全的权限漏洞，攻击者可借此批准或拒绝请假单。 受影响组件 路径 URL：/hrm/leaverequest.php 参数：?msg= 、?id= 影响 普通用户可自行批准或拒绝请假单，此操作原本不被允许。 id： 批准请假单。 msg： 拒绝请假单。 PoC...

CVE-2026-94150

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94151

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94149

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

CVE-2026-94151 Omega Solution HRM OS Role Permission API permission missing authentication

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94151 Omega Solution HRM OS Role Permission API permission missing authentication

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94151

A missing authentication vulnerability in Omega Solution HRM OS (up to version 20260717 ) affects the Role Permission API at the endpoint /role-permission/permission. Manipulating the roleId argument allows an unauthenticated remote attacker to bypass authentication controls, resulting in a low c...

EUVD-2026-83864

A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission API. Executing a manipulation of the argument roleId can lead to missing authentication. The attack may be launched...

CVE-2026-94150 Omega Solution HRM OS SVG File Upload view cross site scripting

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94150 Omega Solution HRM OS SVG File Upload view cross site scripting

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

EUVD-2026-83863

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-94150

CVE-2026-94150 is a cross-site scripting (XSS) flaw in Omega Solution HRM OS versions up to 20260717 , located in an unknown function of the SVG File Upload component at /media/view/. The attack can be initiated remotely but requires high privileges and user interaction , resulting in a low integ...

EUVD-2026-83859

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

CVE-2026-94149 Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injection

A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...

CVE-2026-94149

Omega Solution HRM OS (versions up to 20260717) is affected by an improper control of resource identifiers flaw in the Role Permission Retrieval Endpoint at /role-permission/permission. Manipulating the roleId argument allows a remote, authenticated attacker (low privileges) to access permission ...