high8.8Public exploit code
CVE-2018-10256
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HRSALE The Ultimate HRM 1.0.2 - 'award_id' SQL Injection2018-04-25 · webapps · php
Impact
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hrsale Project | Hrsale | Version 1.0.2 |