Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2025-1389
Disclosure Date: February 17, 2025 (last updated February 17, 2025)
Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
0
Attacker Value
Unknown
CVE-2025-1388
Disclosure Date: February 17, 2025 (last updated February 17, 2025)
Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells
0
Attacker Value
Unknown
CVE-2025-1387
Disclosure Date: February 17, 2025 (last updated February 17, 2025)
Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
0
