Vulnerabilities

TI-2024-06733 CVE-2024-7269 · GHSA-x928-8f88-6fjf

Stored XSS in ConnX ESP HR Management

MEDIUM 40

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00371 Published 2024-08-28 Fixed in 6.6 CWE-79

TI-2015-03410 CVE-2015-4043 · GHSA-rm4h-ff8h-qc77

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to…

MEDIUM 45

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01258 Published 2018-06-19 No fix listed CWE-89

Vulnerabilities

Filters

Stored XSS in ConnX ESP HR Management

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to…