CVE-2012-1507

The provided text describes an XSS vulnerability in OrangeHRM 2.7 RC, including a proof-of-concept URL that triggers a JavaScript alert with document.cookie. No executable exploit code is present.

The provided text describes an XSS vulnerability in OrangeHRM 2.7 RC, with a proof-of-concept URL demonstrating a reflected XSS attack via the `sortOrder1` parameter. No executable exploit code is present, only a description and example URL.

This exploit demonstrates an XSS vulnerability in OrangeHRM 2.7 RC via a crafted URL that injects JavaScript into the `newHspStatus` parameter. The payload steals cookie-based authentication credentials by triggering an alert with `document.cookie`.