CVE-2021-22855

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands...

CVE-2021-22855: Deserialization of Untrusted Data

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands...

CVE-2021-22854: Improper Neutralization of Special Elements used in an SQL Command

The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege...

Soar Cloud System HR Code Issue Vulnerability

Soar Cloud System HR is an application from Soar Cloud China. It provides a human resources system. A code issue vulnerability exists in Soar Cloud System that arises from improper design or implementation during code development for a web-based system or product...

CVE-2021-22853: Improper Access Control

The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work...

PT-2021-15227

Name of the Vulnerable Software and Affected Versions Soar Cloud System affected versions not specified Description The HR Portal of Soar Cloud System fails to filter specific parameters, allowing remote attackers to inject SQL syntax and obtain all data in the database without privilege...

Soar Cloud System HR 安全漏洞

Soar Cloud System is a HR system solution system developed by Soar. Soar Cloud System HR Portal has an access control error that allows remote attackers to access sensitive data through specific packets e.g., user's login information while obtaining a user ID, thus preventing the login function...

PT-2021-15226 · Unknown · Soar Cloud System

Name of the Vulnerable Software and Affected Versions: Soar Cloud System affected versions not specified Description: The HR Portal of Soar Cloud System fails to manage access control, allowing remote attackers to access sensitive data via a specific data packet, such as a user's login informatio...

Soar Cloud System SQL注入漏洞

Soar Cloud System is a HR system solution system developed by Soar. The Soar Cloud System HR portal suffers from a SQL injection vulnerability that stems from not filtering SQL injection statements, which allows a remote attacker to inject SQL syntax and obtain all data in the database without...

PT-2021-15228

Name of the Vulnerable Software and Affected Versions Soar Cloud System affected versions not specified Description The issue concerns the HR Portal of the Soar Cloud System, where a specific function accepts any type of object to be deserialized. This allows attackers to send malicious serialize...