Lucene search
K

3490 matches found

OSV
OSV
added 2025/01/02 9:15 a.m.1 views

CVE-2024-13093

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...

7.5CVSS5.7AI score0.0011EPSS
Exploits1References5
OSV
OSV
added 2025/01/02 9:15 a.m.5 views

CVE-2024-13092

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /parse/calljob/searchajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated...

7.5CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/01/02 9:0 a.m.12 views

CVE-2024-13093 code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...

6.5CVSS0.0011EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/01/02 8:31 a.m.13 views

CVE-2024-13092 code-projects Job Recruitment Job Post search_ajax.php sql injection

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /parse/calljob/searchajax.php of the component Job Post Handler. The manipulation of the argument n leads to sql injection. The attack can be initiated...

6.5CVSS0.0011EPSS
Exploits1References5
CVE
CVE
added 2025/01/02 8:31 a.m.54 views

CVE-2024-13092

CVE-2024-13092 affects code-projects Job Recruitment 1.0, specifically the Job Post Handler’s file _parse/_call_job/search_ajax.php. The vulnerability arises from improper handling of the parameter n, enabling SQL injection via remote access. Multiple sources confirm the impact and disclosure of ...

7.5CVSS6.9AI score0.0011EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-3760 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical vulnerability was found in the code-projects Chat System. It affects an unknown function of the file /admin/deleteuser.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.8AI score0.0016EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.3 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the fact that incorrect manipulation of the parameter n can lead to SQL injection...

7.5CVSS7AI score0.0011EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-1991 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability was found in the code of code-projects Job Recruitment. This issue affects the unknown code of the file / parse/ call job/search ajax.php of the component Job Pos...

7.5CVSS7AI score0.0011EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.2 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the fact that incorrect manipulation of parameter s1 can lead to SQL injection...

7.5CVSS7AI score0.0011EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.2 views

PT-2025-1992 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical issue has been found in the Seeker Profile Handler component, affecting some unknown processing of the file / parse/ call main search ajax.php. The manipulation of the argument...

7.5CVSS6.8AI score0.0011EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.5 views

PT-2025-3761 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting an unknown functionality of the file /admin/deleteroom.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.9AI score0.0016EPSS
Exploits1References12
CVE
CVE
added 2025/01/01 1:31 p.m.131 views

CVE-2025-0168

CVE-2025-0168 affects code-projects Job Recruitment 1.0. The vulnerability is in the file /_parse/_feedback_system.php, where manipulating the parameter person leads to a SQL injection . The issue is exploitable remotely, and the exploit has been disclosed publicly. Connected documents corroborat...

7.5CVSS6.8AI score0.00044EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/01/01 12:0 a.m.2 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from an incorrect manipulation of the parameter person that can lead to SQL injection...

7.5CVSS7AI score0.00044EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/12/30 2:31 a.m.14 views

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.5CVSS7.5AI score0.00096EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/30 2:31 a.m.12 views

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.5CVSS0.00096EPSS
Exploits0References4
CVE
CVE
added 2024/12/30 2:31 a.m.45 views

CVE-2024-13035

CVE-2024-13035 affects code-projects Chat System 1.0. The vulnerability is a SQL injection in the /admin/update_user.php script caused by unsafely handling the id parameter (lack of input validation). Exploitation is possible remotely, and the exploit has been disclosed publicly per multiple sour...

9.8CVSS6.9AI score0.00096EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2024/12/30 2:0 a.m.9 views

CVE-2024-13034 code-projects Chat System update_user.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

5.3CVSS0.00141EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/12/30 2:0 a.m.10 views

CVE-2024-13034 code-projects Chat System update_user.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

5.3CVSS5.9AI score0.00141EPSS
Exploits0References4
CVE
CVE
added 2024/12/30 2:0 a.m.54 views

CVE-2024-13034

The CVE-2024-13034 entry describes a cross-site scripting vulnerability in code-projects Chat System 1.0, affecting an unknown portion of /admin/update_user.php. The issue arises from improper handling of the name argument, enabling remote exploitation and with an exploit publicly disclosed. Conn...

7.6CVSS3.7AI score0.00141EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2024/12/30 1:31 a.m.11 views

CVE-2024-13033 code-projects Chat System chatroom.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS0.00127EPSS
Exploits0References4
Rows per page
Query Builder