CVE-2024-35468

CVE-2024-35468 提交者：Kha Do 人力资源管理系统 1.0 漏洞类型 SQL注入 描述 SourceCodester 人力资源管理系统 1.0 中的 /hrm/index.php 存在SQL注入漏洞，允许攻击者通过 password 参数执行任意SQL命令。 受影响组件 /hrm/index.php 影响 攻击者可以使用 payload 'or'1'='1 无需凭证即可登录管理员账户。 验证概念 匿名登录 源代码存在漏洞 视频...

CVE-2024-34220

基于PHP和MySQL的人力资源管理系统项目免费源代码 提交者：Kha Do 供应商：SourceCodester 受影响和/或已修复版本 漏洞文件 applyleave.php 问题类型 漏洞类型 SQL注入 影响 攻击者可利用此漏洞获取数据库权限，从而导致数据库中大量数据泄露。如果对方数据库拥有DBA权限，则可能进一步获取服务器主机权限。 漏洞利用证明 有效载荷 root@kitploit: POST /hrm/user/applyleave.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Windows NT 10.0;...

CVE-2026-71101

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Tax Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

CVE-2026-71104

Vulnerability in the Oracle HRMS Netherlands product of Oracle E-Business Suite component: Netherlands Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS...

CVE-2026-70690

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...

EUVD-2026-62047

Vulnerability in the Oracle HRMS Netherlands product of Oracle E-Business Suite component: Netherlands Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS...

EUVD-2026-62044

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Tax Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

EUVD-2026-61645

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...

PT-2026-77689

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description A flaw in the US Payroll - General component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation ca...

PT-2026-78088

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description A flaw in the US Payroll Tax Issues component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the...

PT-2026-78091

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS Netherlands versions 12.2.3 through 12.2.15 Description An issue exists in the Netherlands Payroll component of Oracle HRMS Netherlands. A high privileged attacker with network access via HTTP can exploit th...

EUVD-2026-47558

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

EUVD-2026-47557

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

EUVD-2026-47556

Vulnerability in the Oracle HRMS Norway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Norway. While...

EUVD-2026-47554

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. Successful attacks of...

EUVD-2026-47541

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

EUVD-2026-47552

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the vulnerability...

EUVD-2026-47542

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

EUVD-2026-47546

Vulnerability in the Oracle HRMS France product of Oracle E-Business Suite component: French HR. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS France. Successful attac...

EUVD-2026-47501

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS UK. While the...