Vulnerabilities > Oretnom23 > Human Resource Management System > 1.0

DATE CVE VULNERABILITY TITLE RISK
2023-06-23 CVE-2023-3391 SQL Injection vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in SourceCodester Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2022-12-03 CVE-2022-4278 SQL Injection vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in SourceCodester Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-89
7.2
2022-12-03 CVE-2022-4279 Cross-site Scripting vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-79
6.1
2022-12-03 CVE-2022-4273 Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-434
critical
9.8
2022-11-25 CVE-2022-45218 Cross-site Scripting vulnerability in Oretnom23 Human Resource Management System 1.0
Human Resource Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
network
low complexity
oretnom23 CWE-79
6.1
2022-11-16 CVE-2022-43262 SQL Injection vulnerability in Oretnom23 Human Resource Management System 1.0
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php.
network
low complexity
oretnom23 CWE-89
critical
9.8
2022-11-07 CVE-2022-43317 Cross-site Scripting vulnerability in Oretnom23 Human Resource Management System 1.0
A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
network
low complexity
oretnom23 CWE-79
6.1
2022-11-07 CVE-2022-43318 SQL Injection vulnerability in Oretnom23 Human Resource Management System 1.0
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.
network
low complexity
oretnom23 CWE-89
8.8
2022-10-14 CVE-2022-3502 Cross-site Scripting vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-79
5.4
2022-10-14 CVE-2022-3496 Unspecified vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical.
network
low complexity
oretnom23
8.8