Sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /adminroute/incservicecredits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

Sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminroute/decservicecredits.php. The manipulation of the argument date leads to sql injection. The attack can be initiated...

Sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...

CVE-2024-0471

CVE-2024-0471 affects code-projects Human Resource Integrated System 1.0 in the /admin_route/dec_service_credits.php file. The root cause is manipulation of the date parameter that enables SQL injection. This vulnerability has been described as critical and is exploitable remotely, with public di...

CVE-2024-0471 code-projects Human Resource Integrated System dec_service_credits.php sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminroute/decservicecredits.php. The manipulation of the argument date leads to sql injection. The attack can be initiated...

CVE-2024-0470

CVE-2024-0470 affects code-projects Human Resource Integrated System 1.0. The vulnerability is in the /admin_route/inc_service_credits.php component where manipulating the id argument enables SQL injection. Exploitation can be performed remotely; the exploit has been disclosed publicly. Multiple ...

CVE-2024-0469 code-projects Human Resource Integrated System update_personal_info.php sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...

CVE-2024-0469 code-projects Human Resource Integrated System update_personal_info.php sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...

CVE-2024-0471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminroute/decservicecredits.php. The manipulation of the argument date leads to sql injection. The attack can be initiated...

Human Resource Integrated System SQL Injection Vulnerability

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A SQL injection vulnerability exists in Human Resource Integrated System version 1.0, which originates from a SQL injection vulnerability in the /adminroute/decservicecredits.php file...

PT-2024-15586

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Integrated System version 1.0 Description A critical issue was found in the system, affecting some unknown functionality of the file update personal info.php. The manipulation of the sex argument leads to SQL...

CVE-2024-0469: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...

CVE-2024-0470: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /adminroute/incservicecredits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

Human Resource Integrated System SQL Injection Vulnerability

Human Resource Integrated System is a human resource integration system. A SQL injection vulnerability exists in code-projects Human Resource Integrated System version 1.0, which stems from a SQL injection vulnerability in the updatepersonalinfo.php file...

Human Resource Integrated System SQL Injection Vulnerability

Human Resource Integrated System is a human resource integration system. A SQL injection vulnerability exists in code-projects Human Resource Integrated System version 1.0, which stems from a SQL injection vulnerability in the /adminroute/incservicecredits.php file...

OESA-2023-1948 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and...

Webinar recap: Ransomware gangs and Living Off The Land attacks (LOTL)

Discover the intersection of Ransomware-as-a-Service RaaS gangs and Living Off The Land LOTL attacks in our latest webinar, now available on-demand, led by cybersecurity experts Ian Thomas, Mark Stockley, and Bill Cozens. The webinar revealed how RaaS gangs use LOTL tactics, leveraging legitimate...

How Human Elements Impact Email Security

By Owais Sultan Human factors heavily influence email security, with individuals vulnerability to phishing and social engineering playing a crucial role… This is a post from HackRead.com Read the original post: How Human Elements Impact Email Security...

CVE-2023-50466

An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or access sensitive information via injecting a crafted payload into the HMI Name parameter...

evoltree (0.0.7), human-parsing (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2023-6940 via mlflow (1.15.0)

mlflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - evoltree 0.0.7 - human-parsing =0.0.1, =0.3.15, =0.1.0, =0.1.1 Source cves: CVE-2023-6940 Source advisory: OSV:GHSA-HVC6-42VF-JHF8...