hrsale vulnerabilities and exploits

(subscribe to this query)

NA

Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files....

NA

HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter....

355

VMScore

An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user....

1 EDB exploit available

655

VMScore

A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query....

1 EDB exploit available

655

VMScore

A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user....

1 EDB exploit available

655

VMScore

A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution....

1 EDB exploit available