PT-2022-21043

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection via the "/eris/index.php?q=category&search=" endpoint. This allows for potential exploitation. No information is provided about the estimated number of...

CVE-2022-32018: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...

PT-2022-21044

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the "/eris/index.php?q=result&searchfor=bycompany" API endpoint, specifically through the searchfor variable. No...

CVE-2022-32017: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...

PT-2022-21042

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /eris/index.php?q=result&searchfor=byfunction endpoint. The searchfor parameter is vulnerable, specifically when set to...

CVE-2022-32016: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

PT-2022-21046

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the "/eris/index.php?q=hiring&search=" API endpoint, specifically through the search parameter. Recommendations F...

CVE-2022-32015: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

CVE-2022-32014: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-29316: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancesearch...

PT-2022-19534

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the /eris/index.php?q=result&searchfor=advancesearch endpoint, specifically through the...