YokiYoda

2 exploits Active since Nov 2022

CVE-2022-43317 WRITEUP MEDIUM WRITEUP

Human Resource Management System v1.0 - XSS

A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 6.1

View Code

CVE-2022-43318 WRITEUP HIGH WRITEUP

Human Resource Management System v1.0 - SQL Injection

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.

CVSS 8.8

View Code