350 matches found
WordPress Human Resource Management (HRM) for WordPress – FooPeople plugin <= 1.0.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Human Resource Management HRM for WordPress – FooPeople plugin versions = 1.0.4. Solution No patched version available...
WordPress Human Resource Management (HRM) for WordPress – FooPeople plugin <= 1.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Human Resource Management HRM for WordPress – FooPeople plugin versions = 1.0.4. Solution No patched version available...
CVE-2022-25014: Improper Neutralization of Input During Web Page Generation
Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting XSS vulnerability via the "m" parameter in the Dashboard of the current user. This vulnerability allows attackers to compromise session credentials via user interaction with a crafted link...
CVE-2022-25013: Improper Neutralization of Input During Web Page Generation
Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the "key" and "fm" parameters in the component login.php...
PT-2022-17047
Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description A reflected cross-site scripting XSS issue was found in the Dashboard of the current user, allowing attackers to compromise session credentials via user interaction with a crafted link. The vulnerability i...
PT-2022-17048
Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description A stored cross-site scripting XSS issue allows attackers to steal cookies via a crafted payload inserted into the First Name field. This can be exploited to gain unauthorized access to user sessions...
PT-2022-17046
Name of the Vulnerable Software and Affected Versions Ice Hrm version 30.0.0.OS Description The issue is related to multiple reflected cross-site scripting XSS vulnerabilities. These vulnerabilities are exploited via the key and fm parameters in the component login.php. Recommendations For Ice Hr...
Ice Hrm 跨站脚本漏洞
Ice Hrm is a human resource management system, and a cross-site scripting vulnerability exists in Ice Hrm version 30.0.0.OS. The vulnerability stems from the inability of the IceHRM website to effectively filter html tags in user input, which could be exploited by a logged-in attacker to steal...
Ice Hrm 跨站脚本漏洞
Ice Hrm is a human resource management system. Ice Hrm version 30.0.0.OS is vulnerable to a cross-site scripting vulnerability caused by a lack of data validation filtering of user-supplied and output data in the "m" parameter of the user dashboard. An attacker could exploit this vulnerability to...
CVE-2022-25015: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field...
Ice Hrm 跨站脚本漏洞
Ice Hrm is a human resource management system. Ice Hrm version 30.0.0.OS is vulnerable to a cross-site scripting vulnerability that stems from a lack of checksum filtering of user-supplied data and output data in the key and fm parameters in the component login.php. An attacker could exploit this...
IceHrm Cross-Site Scripting Vulnerability
IceHrm is a human resource management Hrm system that includes features such as employee management, leave management, and payroll. The system includes functions such as employee management, leave management and payroll management.IceHrm has security vulnerabilities on several pages that could be...
Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr
✍️ Description In HRM -- Expenses reports Directory, you don't protect files built by mass actions to delete with CSRF attacks then attacker able to delete arbitrary reports only with knowing their names. 🕵️♂️ Proof of Concept // PoC.html history.pushState'', '', '/' ...
Ice Hrm Cross-Site Scripting Vulnerability
Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability to execute arbitrary code via the /app/endpoint parameter...
Ice Hrm Cross-Site Request Forgery Vulnerability
Ice Hrm is a human resource management system. A security vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability to create new administrator accounts or change user passwords...
Ice Hrm Session Fixation Vulnerability
Ice Hrm is a human resource management system. Ice Hrm suffers from a session fixation vulnerability. An attacker can exploit the vulnerability to hijack a valid user session via a specially crafted session cookie...
Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2021-45759)
Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability by uploading a crafted file that will result in the execution of arbitrary web script or HTML...
CVE-2021-35046
A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session cookie...
CVE-2021-34243
A stored cross site scripting XSS vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbitrary web scripts or HTML via a crafted file uploaded into the Document Management tab. The exploit is triggered when a user visits the upload location of the crafted file...