Vulnerabilities

TI-2013-02242 CVE-2013-2499 · GHSA-w2rx-6hqj-cx84

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication…

LOW 39

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03254 Published 2020-01-27 No fix listed CWE-200

TI-2013-02241 CVE-2013-2498 · GHSA-3x36-m3fq-9jv8

SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php…

LOW 35

SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01181 Published 2014-02-28 No fix listed CWE-89

Vulnerabilities

Filters

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication…

SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php…