1143 matches found
CVE-2024-3415
CVE-2024-3415 concerns SourceCodester Human Resource Information System 1.0. vulnerability in the file Superadmin_Dashboard/process/addbranches_process.php where manipulating the parameter branches_name enables cross-site scripting. The issue is exploitable remotely (no user interaction required)...
CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting
A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...
CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting
A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...
CVE-2024-3413 SourceCodester Human Resource Information System login_process.php sql injection
A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/loginprocess.php. The manipulation of the argument hremail/hrpassword leads to sql injection. The attack can be initiat...
CVE-2024-3413
CVE-2024-3413 affects SourceCodester Human Resource Information System v1.0, where an SQL injection exists in the file initialize/login_process.php, caused by manipulating the arguments hr_email and hr_password. The vulnerability is exploitable remotely and the exploit has been disclosed publicly...
CVE-2024-3413 SourceCodester Human Resource Information System login_process.php sql injection
A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/loginprocess.php. The manipulation of the argument hremail/hrpassword leads to sql injection. The attack can be initiat...
Human Resource Information System 跨站脚本漏洞
Human Resource Information System is a human resource information system. A cross-site scripting vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a cross-site scripting vulnerability in the corporate name parameter of the...
Human Resource Information System 安全漏洞
Human Resource Information System is a human resource information system. A security vulnerability exists in version 1.0 of the SourceCodester Human Resource Information System, which results from an SQL injection vulnerability in the hremail/hrpassword parameters of the initialize/loginprocess.p...
CVE-2024-3413: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/loginprocess.php. The manipulation of the argument hremail/hrpassword leads to sql injection. The attack can be initiat...
CVE-2024-3415: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file SuperadminDashboard/process/addbranchesprocess.php. The manipulation of the argument branchesname leads to cross site scripting. It...
CVE-2024-3414: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file SuperadminDashboard/process/addcorporateprocess.php. The manipulation of the argument corporatename leads to cross site scripting...
SQL Injection
Reportico is vulnerable to SQL Injection. The vulnerability is due to improper input validation in the project parameter, allowing attackers to inject SQL queries and obtain sensitive information or other system information...
OpenClinic GA Security Vulnerability
OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A security vulnerability exists in OpenClinic GA version 5.247.01, which stems from the presence of a Reflective Cross-Site Scripting XS...
CVE-2023-33676
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...
CVE-2023-33676
Sourcecodester Lost and Found Information System Version 1.0 is vulnerable to an unauthenticated SQL Injection at the ?page=items/view&id=* endpoint. This vulnerability allows an attacker to escalate privileges to achieve remote command execution . As a temporary workaround, it is recommended to ...
CVE-2023-33676: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
CVE-2023-33677
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...
CVE-2023-33677
CVE-2023-33677 affects Sourcecodester Lost and Found Information System v1.0. The vulnerability is an unauthenticated SQL Injection exposed at the API endpoint ?page=items/view&id=. The root cause is improper input handling for the id parameter, allowing crafted input to influence database querie...