Hrsale Project Hrsale
4 CVEs affecting Hrsale Project Hrsale. Latest disclosed: 2018-05-01. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10260 | High | 8.8 | 2018-05-01 | A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user. |
CVE-2018-10257 | High | 8.8 | 2018-05-01 | A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be in… |
CVE-2018-10256 | High | 8.8 | 2018-05-01 | A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query. |
CVE-2018-10259 | Medium | 5.4 | 2018-05-01 | An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user. |