CVE-2018-15873

概要

参考情報

• hackpuntes.com/cve-2018-15873-sentrifugo-hrms-3-2-blind-sql-injection · Exploit

sentrifugo のその他の脆弱性

• CVE-2024-29879中 6.1Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/index/getdepartments/format/html, 'business_id'…
• CVE-2024-29878中 6.1Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'description' parameter. The…
• CVE-2024-29877中 6.1Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/expenses/expensecategories/edit, 'expense_catego…
• CVE-2024-29876緊急 9.8SQL injection vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter. The exploitati…
• CVE-2024-29875緊急 9.8SQL injection vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sort_name' parameter. Th…