298 matches found
OrangeHRM 2.6.0.1 - Local File Inclusion
OrangeHRM 2.6.0.1 - Local File Inclusion Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability Date: 11-10-2010 Author: ZonTa - LkHackerZ - Mail: zontahackersatgmaildotcom Software Link: http://www.orangehrm.com/product-download.php?type=stable-zip...
OrangeHRM 2.6.0.1 - Local File Inclusion
Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability Date: 11-10-2010 Author: ZonTa - LkHackerZ - Mail: zontahackersatgmaildotcom Software Link: http://www.orangehrm.com/product-download.php?type=stable-zip...
SA00001-2010
Vulnerability Report 1. Affected software OrangeHRM 2.5.0.4 Prior versions may also be affected. "OrangeHRM is an Open Source HRM system. It provides an ideal solution for small and medium sized enterprises looking for an inexpensive way to effectively manage and develop their human resources."...
OrangeHRM < 2.5.5 Multiple Vulnerabilities
Binary data 5531.prm...
CVE-2007-5931
The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely...
Design/Logic Flaw
The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2007-5931
The CVE-2007-5931 entry concerns OrangeHRM prior to 2.2.2, where the reDirect function in lib/controllers/RepViewController.php does not verify user privileges. This root cause allows remote attackers to obtain data via unspecified vectors. The NVD record assigns a MEDIUM severity (CVSSv2: AV:N/A...
CVE-2007-5931
The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely...
OrangeHRM < 2.2.2 RepViewController.php Privilege Escalation
Binary data 4278.prm...
Code injection
Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...
CVE-2007-1193
Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...
CVE-2007-1193
Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...
CVE-2007-1193
Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...
CVE-2007-1193
OrangeHRM
OrangeHRM < 2.1 alpha 5 login.php txtUserName Parameter SQL Injection
Binary data 3928.prm...
OrangeHRM login.php txtUserName Parameter SQL Injection
The remote host is running OrangeHRM, a human resource management system written in PHP. The version of OrangeHRM installed on the remote host fails to sanitize input to the 'txtUserName' parameter of the 'login.php' script before using it in a database query. An unauthenticated, remote attacker...
