OrangeHRM <= 2.6.3 'PluginController.php' LFI Vulnerability - Active Check

OrangeHRM is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:orangehrm:orangehrm";...

CVE-2010-4798

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter...

Directory traversal

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter...

CVE-2010-4798

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter...

CVE-2010-4798

CVE-2010-4798 affects OrangeHRM 2.6.0.1 (and related versions such as 2.6.1 per OpenVAS references). The issue is a directory traversal/local file include (LFI) vulnerability in index.php triggered via unsafely processed uri parameter, enabling an attacker to include and execute arbitrary local f...

OrangeHRM 2.6.3 (PluginController.php) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.orangehrm.com...

OrangeHRM 2.6.3 Local File Inclusion

------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.orangehrm.com/ Discovery Date..........4/25/2011 Tested...

OrangeHRM 2.6.3 - 'PluginController.php' Local File Inclusion

------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.orangehrm.com/ Discovery Date..........4/25/2011 Tested...

OrangeHRM 2.6.3 - PluginController.php Local File Inclusion

OrangeHRM 2.6.3 - PluginController.php Local File Inclusion ------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

OrangeHRM 'jobVacancy.php' Cross Site Scripting Vulnerability

OrangeHRM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

OrangeHRM <= 2.6.2 'jobVacancy.php' XSS Vulnerability - Active Check

OrangeHRM is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

OrangeHRM 2.6.2 - 'jobVacancy.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47046/info OrangeHRM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

OrangeHRM 2.6.2 Cross Site Scripting

------------------------------------------------------------------------ Software................OrangeHRM 2.6.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.orangehrm.com/ Vendor Contact Date.....3/11/2011 Disclosure...

OrangeHRM 2.6.2 - jobVacancy.php Cross-Site Scripting

OrangeHRM 2.6.2 - jobVacancy.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47046/info OrangeHRM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverag...

OrangeHRM 'uri' Parameter Local File Include Vulnerability

OrangeHRM is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allow...

OrangeHRM <= 2.6.1 'uri' Parameter LFI Vulnerability

OrangeHRM is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ==================================================== OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability ==================================================== Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability Date: 11-10-2010...

OrangeHRM Detection

This host is running OrangeHRM, a Human Resource management and development system. OpenVAS Vulnerability Test $Id: gborangehrmdetect.nasl 5735 2017-03-27 12:27:20Z cfi $ OrangeHRM Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software;...

OrangeHRM Detection (HTTP)

HTTP based detection of OrangeHRM. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100850";...

OrangeHRM 2.6.0.1 Local File Inclusion

Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability Date: 11-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom Software Link: http://www.orangehrm.com/product-download.php?type=stable-zip http://sourceforge.net/projects/orangehrm/files/stable/2.6/orangehrm-2.6.0.1.zip/download...