CVE-2019-12839

In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration txtSendmailPath parameter that allows authenticated attackers to achieve arbitrary command execution...

PT-2019-12978

Name of the Vulnerable Software and Affected Versions OrangeHRM versions 4.3.1 and earlier Description The issue is related to an input validation error in the admin/listMailConfiguration endpoint, specifically with the txtSendmailPath parameter. This error allows authenticated attackers to execu...

CVE-2019-12839: Improper Neutralization of Special Elements used in an OS Command

In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration txtSendmailPath parameter that allows authenticated attackers to achieve arbitrary command execution...