CVE-2011-5259 | SynScan

Vulnerability Database

291,049

Total vulnerabilities in the database

CVE-2011-5259

SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Published: Feb 12, 2013
Updated: Apr 13, 2023
CVE: CVE-2011-5259
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
orangehrm / orangehrm	2.6.6	2.6.6.x
orangehrm / orangehrm	2.6.8	2.6.8.x
orangehrm / orangehrm	2.6.5	2.6.5.x
orangehrm / orangehrm	2.6.4	2.6.4.x
orangehrm / orangehrm	2.6.7	2.6.7.x
orangehrm / orangehrm	2.6.8.1	2.6.8.1.x
orangehrm / orangehrm	2.6.1	2.6.1.x
orangehrm / orangehrm	2.6.10	2.6.10.x
orangehrm / orangehrm	2.6.2	2.6.2.x
orangehrm / orangehrm	2.6.9	2.6.9.x
orangehrm / orangehrm	2.6.0.1	2.6.0.1.x
orangehrm / orangehrm	2.6.3	2.6.3.x
orangehrm / orangehrm	-	2.6.11.x
orangehrm / orangehrm	2.6.0	2.6.0.x