Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from the over/eris/index.php?q=result&searchfor=bycompany page Lack of validation of external input SQL statements. An attacker could use thi...

PT-2022-21038

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection via the "/eris/admin/user/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks. No information is provided abo...

CVE-2022-32012: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/employee/index.php?view=edit&id=...

CVE-2022-32007: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...

PT-2022-21054

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/car-rental-management-system/admin/index.php?page=manage car&id=" endpoint, where the id parameter is vulnerable...

PT-2022-21042

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /eris/index.php?q=result&searchfor=byfunction endpoint. The searchfor parameter is vulnerable, specifically when set to...

CVE-2022-32016: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

PT-2022-21046

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the "/eris/index.php?q=hiring&search=" API endpoint, specifically through the search parameter. Recommendations F...

PT-2022-21037

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /eris/admin/vacancy/index.php endpoint, specifically when the view parameter is set to edit and the id parameter is...

CVE-2022-32013: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=...

CVE-2022-32015: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

PT-2022-21039

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "/eris/admin/applicants/index.php?view=view&id=" endpoint. The id variable is vulnerable to injection attacks. No...

CVE-2022-32011: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-32027: Improper Neutralization of Special Elements used in an SQL Command

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=managecar&id=...

CVE-2022-32017: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...

PT-2022-20694

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/category/index.php?view=edit&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized da...

PT-2022-20692

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to SQL Injection. It can be exploited via the "/ordering/admin/stockin/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

PT-2022-20689

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection, which can be exploited via the "/ordering/index.php?q=products&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

CVE-2022-31335: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...

PT-2022-20695

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the /ordering/admin/user/index.php?view=edit&id= API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized access o...