| Package | Affected versions | Patched versions |
|---|---|---|
| simplehrm | = 2.3≤ 2.2 |
SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free