Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Simplehrm Subscribe
Filtered by product Simplehrm
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-2499 1 Simplehrm 1 Simplehrm 2020-01-30 5.0 MEDIUM 7.5 HIGH
SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.
CVE-2013-2498 1 Simplehrm 1 Simplehrm 2017-08-28 7.5 HIGH N/A
SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin.