Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

Panmicro e-cology v8 SQL Injection Vulnerability

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the id parameter of the Panmicro e-cology oa system/hrm/resource/HrmResourceContactEdit.jsp page, which allows an attacker to elevate the privileges...

用友人力资源管理 country 和 language 字段任意文件下载漏洞

No description provided by source...

IceHrm 7.1 - Multiple Vulnerabilities

IceHrm 7.1 - Multiple Vulnerabilities IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has...

Simple HRM System 2.3 - Multiple Vulnerabilities

Simple HRM System 2.3 - Multiple Vulnerabilities Exploit Title: Multiple Vulnerabilities in Simple HRM system v2.3 and below Date: 12/04/2013 Exploit Author: Doraemon Vendor Homepage: http://www.simplehrm.com/ Software Link: http://sourceforge.net/projects/simplehrm/ Version: 2.2/2.3 Tested on: 2...

Design/Logic Flaw

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

CVE-2009-0867

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

CVE-2009-0867

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...

CVE-2009-0867

CVE-2009-0867 affects Fujitsu Enhanced Support Facility HRM-S (versions 3.0 and 3.0.1). The HRM-S service allows remote attackers to obtain hardware and software information via unspecified requests in a client connection. Documents in multiple feeds corroborate an information-disclosure issue, b...

CVE-2009-0867: Exposure of Sensitive Information to an Unauthorized Actor

The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain 1 hardware and 2 software information via unspecified requests in a client connection...