Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/11 4:31 a.m.•19 views

CVE-2024-34222

Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...

5.9CVSS6.6AI score0.00392EPSS
SaveExploits1
OSV
OSV
•added 2025/07/29 1:15 p.m.•16 views

CVE-2025-40684

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php...

6.1CVSS6AI score0.00169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/29 12:00 a.m.•3 views

CVE-2025-40684: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccountry' parameter in/country.php...

6.1CVSS6.1AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 3:38 p.m.•28 views

CVE-2024-34222

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

5.9CVSS7.7AI score0.00392EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/14 3:38 p.m.•16 views

CVE-2024-34222

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

5.9CVSS5.8AI score0.00392EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•5 views

CVE-2024-34222: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter...

5.9CVSS5.8AI score0.00392EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/13 5:30 p.m.•74 views

CVE-2024-34222

The Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter located at the URL path /hrm/country.php . An attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially compromising the database. Proof of Concept (P...

5.9CVSS8.1AI score0.00392EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder