CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2022-50997

Weaver (Fanwei) E-cology 8.0 and 9.0 contain a SQL injection in HrmCareerApplyPerView.jsp that allows unauthenticated remote attackers to extract data from the backend database by manipulating the id GET parameter. An attacker can send a single crafted GET request using UNION-based payloads throu...

泛微OA HrmCareerApplyPerView.jsp SQL注入漏洞

No description provided by source...