Orca HCM SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Orca HCM by Learning Digital, affecting versions prior to 11.0. This vulnerability allows attackers with regular privileges to inject arbitrary SQL commands, potentially leading to unauthorized reading, modification, or deletion of database contents.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries. This could result in unauthorized access to data, modification of data, or deletion of database records.

Remediation

Users are advised to update to version 11.0 or later. Customized users should contact the vendor for update instructions.