4 matches found
CVE-2022-3471
CVE-2022-3471 affects SourceCodester Human Resource Management System; the city.php component’s searccity parameter is vulnerable to SQL injection. A remote attacker can exploit this vulnerability, and public PoCs/exploits are referenced in the records. Multiple connected sources confirm the issu...
CVE-2022-3472
SourceCodester Human Resource Management System is affected by CVE-2022-3472 due to an SQL injection in the city.php component, triggered by manipulating the cityedit parameter. The issue is exploitable remotely and an exploit/PoC has been disclosed publicly. Affected versions are not specified i...
CVE-2022-3473
CVE-2022-3473 : In the SourceCodester Human Resource Management System, the vulnerability resides in the getstatecity.php component where manipulating the ci parameter results in an SQL injection . The issue is exploitable remotely and, per multiple sources, the exploit has been publicly disclose...
CVE-2022-3470
CVE-2022-3470 affects the SourceCodester Human Resource Management System. Affected is an unknown function in the file getstatecity.php; manipulating the parameter sc triggers a SQL injection, enabling remote exploitation. Publicly disclosed exploits exist, with the vulnerability highlighted acro...