CVE-2012-1506
OrangeHRM < 2.7 - Authenticated SQL Injection via hspSummaryId Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-1506. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in OrangeHRM 2.7 RC via the `hspSummaryId` parameter in the `haltResumeHsp.php` endpoint. The payload uses a time-based blind SQLi technique with `BENCHMARK` and conditional logic to infer database information.
Description
SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated users to execute arbitrary SQL commands via the hspSummaryId parameter to plugins/ajaxCalls/haltResumeHsp.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in OrangeHRM 2.7 RC via the `hspSummaryId` parameter in the `haltResumeHsp.php` endpoint. The payload uses a time-based blind SQLi technique with `BENCHMARK` and conditional logic to infer database information.