Skip to content
Threat Feed
Subscribe

Product

E-HR (< 8.2)

1 brief RSS
critical threat

SQL Injection in Hongjing e-HR /servlet/codesettree

Hongjing e-HR versions prior to 8.2 are vulnerable to unauthenticated SQL injection via the categories parameter in the /servlet/codesettree endpoint, allowing remote attackers to extract sensitive database content.

exploited e-HR web-application injection vurnerability
1r 1t 1c