1 results (0.004 seconds)

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 2

09 Sep 2017 — WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter. WPHRM Human Resource Management System para WordPress 1.0 permite la inyección SQL mediante el parámetro employee_id. • https://www.exploit-db.com/exploits/42924 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •