CVE-2025-10444 Campcodes Online Job Finder System advancesearch.php sql injection

A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-10444

CVE-2025-10444 affects Campcodes Online Job Finder System 1.0. The config/behavior: an SQL injection vulnerability exists in the /advancesearch.php file caused by manipulation of the Username parameter, enabling remote exploitation. The exploit has been publicly released and is consistent across ...

CVE-2025-10444 Campcodes Online Job Finder System advancesearch.php sql injection

A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

PT-2025-37477

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A security flaw exists in Campcodes Online Job Finder System that allows for SQL injection. The issue affects the processing of the /advancesearch.php file. Manipulation of the...

PT-2025-37563

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A flaw has been found that allows for SQL injection. The issue affects an unknown function of the file /index.php?q=result=bycompany. Manipulation of the Search parameter causes the...

PT-2025-37486

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A vulnerability exists in Campcodes Online Job Finder System 1.0. The issue is related to unrestricted file upload, stemming from the manipulation of the picture argument within an...

Campcodes Online Job Finder System 安全漏洞

CampCodes Online Job Finder System is an online job finder system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which stems from an incorrect manipulation of the parameter picture in the file /eris/applicationform.php, which could...

CampCodes Online Job Finder System SQL注入漏洞

CampCodes Online Job Finder System is an online job finder system from CampCodes, Inc. A SQL injection vulnerability exists in version 1.0 of the CampCodes Online Job Finder System, which stems from an incorrect manipulation of the Search parameter in the file...

Campcodes Online Job Finder System SQL注入漏洞

CampCodes Online Job Finder System is an online job finder system from CampCodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which stems from an incorrect manipulation of the parameter Username in the file /advancesearch.php, which could le...

CVE-2025-10448: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Online Job Finder System 1.0. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This manipulation of the argument Search causes sql injection. The attack can be initiated remotely. The exploit has been published and may be use...

CVE-2025-10447: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in Campcodes Online Job Finder System 1.0. The impacted element is an unknown function of the file /eris/applicationform.php. The manipulation of the argument picture results in unrestricted upload. It is possible to launch the attack remotely. The exploit is now publ...

CVE-2025-10444: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

Exploit for Path Traversal in Thecartpress Thecartpress_Ecommerce_Shopping_Cart

This is a PoC exploit for CVE-2015-3301, a vulnerability in the Stagefright media library that allows for remote code execution on Android devices. The exploit, called Metaphor, is designed to bypass Address Space Layout Randomization ASLR and execute arbitrary code on the device. The exploit...

CVE-2025-10271

A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was...

CVE-2025-10271

A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was...

CVE-2025-10271 erjinzhi 10OA finder cross site scripting

A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was...

CVE-2025-10271

CVE-2025-10271 affects erjinzhi 10OA 1.0. The vulnerability is in the server-side processing of the Name argument within the file /trial/mvc/finder, where improper handling enables cross-site scripting (XSS). The issue appears to be exploitable remotely and publicly disclosed, with exploitation d...

CVE-2025-47571

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHP Local File Inclusion.This issue affects Super Store Finder: from n/a through 7.8...

erjinzhi 10OA 代码注入漏洞

erjinzhi 10OA is an enterprise automation system from China Binary erjinzhi. A code injection vulnerability exists in erjinzhi 10OA version 1.0, which stems from an incorrect manipulation of the parameter Name in the file /trial/mvc/finder, and could lead to a cross-site scripting attack...

CVE-2025-10271: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was...