CVE-2024-36428

Publication date

2024-05-27 22:48:18

Family

mitre

State

PUBLISHED

Description

OrangeHRM 3.3.3 allows admin/viewProjects sortOrder SQL injection.