CVEs-PoC/2018/CVE-2018-10256.md

CVE-2018-10256

Description

A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.

POC

Reference

• http://packetstormsecurity.com/files/147366/HRSALE-The-Ultimate-HRM-1.0.2-SQL-Injection.html
• https://www.exploit-db.com/exploits/44537/

Github

No PoCs found on GitHub currently.