Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2024-36428
OrangeHRM 3.3.3 allows admin/viewProjects sortOrder SQL injection.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.732
EPSS Ranking
98.7%
CVSS Severity
CVSS v3 Score
8.1
References
https://github.com/4rdr/proofs/blob/main/info/OrangeHRM_3.3.3_SQLi_via_sortOrder.md
https://sourceforge.net/projects/orangehrm/files/stable/3.3.3/
https://github.com/4rdr/proofs/blob/main/info/OrangeHRM_3.3.3_SQLi_via_sortOrder.md
https://sourceforge.net/projects/orangehrm/files/stable/3.3.3/
Products affected by CVE-2024-36428
Orangehrm
»
Orangehrm
»
Version:
3.3.3
cpe:2.3:a:orangehrm:orangehrm:3.3.3
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved