Vulnerabilities (CVE)

Filtered by vendor Oretnom23 Subscribe
Filtered by product Human Resource Management System
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-3497 1 Oretnom23 1 Human Resource Management System 2023-12-28 N/A 5.4 MEDIUM
A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unknown function of the component Master List. The manipulation of the argument city/state/country/position leads to cross site scripting. It is possible to launch the attack remotely. VDB-210786 is the identifier assigned to this vulnerability.
CVE-2022-3471 1 Oretnom23 1 Human Resource Management System 2023-12-28 N/A 4.9 MEDIUM
A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file city.php. The manipulation of the argument searccity leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210715.
CVE-2022-3472 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 4.9 MEDIUM
A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210716.
CVE-2022-3470 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 6.5 MEDIUM
A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file getstatecity.php. The manipulation of the argument sc leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210714 is the identifier assigned to this vulnerability.
CVE-2022-4279 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 6.1 MEDIUM
A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214776.
CVE-2022-3493 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 5.4 MEDIUM
A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-210773 was assigned to this vulnerability.
CVE-2022-43317 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVE-2022-3502 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 5.4 MEDIUM
A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210831.
CVE-2022-45218 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 6.1 MEDIUM
Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. This vulnerability is triggered via a crafted payload injected into an authentication error message.
CVE-2022-3473 1 Oretnom23 1 Human Resource Management System 2023-12-26 N/A 6.5 MEDIUM
A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-210717 was assigned to this vulnerability.