Search results

Authenticated SQL Injection via Employee Filter in IceHRM Reports

Status: Open.

#376 In gamonoid/icehrm;

· geo-chen opened on Jun 14, 2026

IDOR on /api/employees/{id}/{skills,educations,certifications,languages,leaves,attendance,status} lets any employee read any colleague's HR records

Status: Open.

#375 In gamonoid/icehrm;

· geo-chen opened on Jun 14, 2026

Face Capture on Time In / Out

Status: Open.

#374 In gamonoid/icehrm;

· ronoliverclarin opened on Mar 29, 2026

Systemic authorization bypass: 14 auth/authz vulnerabilities including admin module access from employee accounts

Status: Open.

#373 In gamonoid/icehrm;

· lighthousekeeper1212 opened on Feb 28, 2026

URGENT – ICEhrm PRO License Expired – automatic renewal link not working

Status: Open.

#372 In gamonoid/icehrm;

· Fabriceccmedia opened on Feb 24, 2026

Unable to Punch in time

Status: Open.

#369 In gamonoid/icehrm;

· abenchtein opened on Nov 5, 2025

Reflected XSS on the login page

Status: Open.

#366 In gamonoid/icehrm;

· manisashank opened on Apr 14, 2025

SAML with keycloak

Status: Open.

#365 In gamonoid/icehrm;

· VincentSC opened on Feb 10, 2025

SMTP Configuration

Status: Open.

#364 In gamonoid/icehrm;

· tmanmidwest opened on Dec 13, 2024

Node not included in worker container

Status: Open.

#362 In gamonoid/icehrm;

· dampersand opened on Sep 16, 2024

System > Data Import missing in IceHRM Open Source

Status: Open.

#361 In gamonoid/icehrm;

· brendangibbs opened on Aug 22, 2024

Reflected XSS on the login page

Status: Open.

#360 In gamonoid/icehrm;

· manisashank opened on Aug 21, 2024