Vendors / Simplehrm Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Simplehrm records in CISA KEV No Simplehrm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03254 · Published 2020-01-27 · No fix listed CWE-200
Priority LOW 35
SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01181 · Published 2014-02-28 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
0 2 0 0 0
