← All advisories

High severity7.5NVD Advisory· Published Jan 27, 2020· Updated Jun 16, 2026

CVE-2013-2499

CVE-2013-2499

Description

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via spoofing a cookie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Simplehrm/Simplehrmllm-fuzzy2 versions
<=2.3+ 1 more
- (no CPE)range: <=2.3
- cpe:2.3:a:simplehrm:simplehrm:*:*:*:*:*:*:*:*range: <=2.3
SimpleHRM/SimpleHRMdescription

Patches

Vulnerability mechanics

References

3

www.openwall.com/lists/oss-security/2013/04/17/1nvdExploitMailing ListThird Party Advisory
www.securityfocus.com/bid/59255nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/83629nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.