Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
icehrm icehrm vulnerabilities and exploits
(subscribe to this query)
5.8
CVSSv2
CVE-2021-35046
A session fixation vulnerability exists in Ice Hrm 29.0.0 OS which allows an malicious user to hijack a valid user session via a crafted session cookie.
Icehrm Icehrm 29.0.0.os
6.8
CVSSv2
CVE-2021-34244
A cross site request forgery (CSRF) vulnerability exists in Ice Hrm 29.0.0.OS which allows malicious users to create new admin accounts or change users' passwords.
Icehrm Icehrm 29.0.0.os
7.5
CVSSv2
CVE-2021-38823
The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is opened in a different browser.
Icehrm Icehrm 30.0.0.os
6.8
CVSSv2
CVE-2020-9270
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.
Icehrm Icehrm 26.2.0.os
1 Github repository
4.3
CVSSv2
CVE-2020-9271
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.
Icehrm Icehrm 26.2.0.os
1 Github repository
NA
CVE-2022-265881
ICEHRM version 31.0.0.0S cross site request forgery exploit that demonstrates account deletion. This finding varies from the original finding of cross site request forgery in the same software from the same researcher.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5324
path traversal
CVE-2024-4743
CVE-2024-5184
TCP
CVE-2024-27822
code injection
CVE-2024-28995
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2