Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 10 MIN AGO
T-10M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2024-58374
Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree
High
PUBLISHED
CNA: VulnCheck
Base score
8.7
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 17:21Z
1 DAY AGO
Last updated
2026-08-13 17:56Z
1 DAY AGO
Reserved
2026-08-13
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
High (CVSS 8.7)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-89
SSVC decision
Exploitation
poc
Automatable
yes
Technical Impact
partial
Data version
5.2
Document digest
72eb8997ca723e3c4630f970674fe410f865fc909a30d2ee8ab84ed3e833dc2d
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Hongjing Century
e-HR
0
—
05
References
REFS: 3
www.ddpoc.com
DayDayPoC Advisory
https://www.ddpoc.com/DVB-2024-7391.html
third-party-advisory
cn-sec.com
CN-SEC Disclosure
https://cn-sec.com/archives/2926383.html
technical-description
exploit
www.vulncheck.com
https://www.vulncheck.com/advisories/hongjing-e-hr-unauthenticated-sql-injection-via-getsdutytree
third-party-advisory