Browse CVEs

MEDIUM 6.1 CVE-2023-6282 IceHrm 23.0.0.OS does not sufficiently encode user-controlled input, which creates a Cross-Site Scripting (XSS) vulnerability via /icehrm/app/fileupl… Icehrm Mitigation only Fix from $1,6002024-01-25 MEDIUM 6.5 CVE-2022-26588 A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.ph… Icehrm No fix yet Fix from $1,6002022-04-08 MEDIUM 6.1 CVE-2022-25013 Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters in the co… Icehrm No fix yet Fix from $1,6002022-02-28 MEDIUM 6.1 CVE-2022-25014 Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of the curren… Icehrm No fix yet Fix from $1,6002022-02-28 MEDIUM 5.4 CVE-2022-25015 A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the Firs… Icehrm No fix yet Fix from $1,6002022-02-28 CRITICAL 9.8 CVE-2021-38823 The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session t… Icehrm No fix yet Fix from $2,3002021-10-04 MEDIUM 5.4 CVE-2021-38822 A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary executio… Icehrm No fix yet Fix from $1,6002021-10-04 HIGH 8.8 CVE-2021-34244 A cross site request forgery (CSRF) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change u… Icehrm No fix yet Fix from $1,9502021-06-22 MEDIUM 6.1 CVE-2021-35045 Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint. Icehrm No fix yet Fix from $1,6002021-06-22 MEDIUM 6.1 CVE-2021-35046 A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session co… Icehrm No fix yet Fix from $1,6002021-06-22 MEDIUM 5.4 CVE-2021-34243 A stored cross site scripting (XSS) vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbitrary web scripts or HTML… Icehrm No fix yet Fix from $1,6002021-06-22 HIGH 7.2 CVE-2020-6114 An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538… Icehrm No fix yet Fix from $1,9502020-07-10 HIGH 8.8 CVE-2020-9270 ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php. Icehrm No fix yet Fix from $1,9502020-02-18 MEDIUM 6.5 CVE-2020-9271 ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php. Icehrm No fix yet Fix from $1,6002020-02-18 HIGH 7.5 CVE-2018-12420 IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request. Icehrm 23.0.1.os+ Fix from $1,9502018-06-14