PT-2021-23509

Name of the Vulnerable Software and Affected Versions PHP Event Calendar versions prior to 2021-09-03 Description The issue allows SQL injection, as demonstrated by the "/server/ajax/user manager.php" endpoint, specifically the username parameter. This can be used to execute SQL statements direct...

PT-2020-7390

Name of the Vulnerable Software and Affected Versions: SimpleHRM versions 2.3 and earlier Description: The issue allows remote attackers to bypass the authentication process in the 'user manager.php' file by spoofing a cookie. Recommendations: For SimpleHRM versions 2.3 and earlier, update to a...

WordPress ProfileGrid Plugin <= 2.6.6 - Reflected Cross Site Scripting

A reflected cross-site scripting vulnerability was found in ProfileGrid plugin in 2.6.6 version. The vulnerability exists in the file /admin/partials/user-manager.php. There some of $GET parameters are not escaped. For example: ifisset$GET‘search’ echo $GET‘search’; … Solution Update the plugin...

PT-2014-2588

Name of the Vulnerable Software and Affected Versions SimpleHRM versions 2.3, 2.2, and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter to "index.php/user/setLogin". This is a SQL injection vulnerability in the login page,...