62 matches found
Online Job Search System 1.0 Arbitrary File Upload
============================================================================================================================================= | Title : Online Job Search System 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
CVE-2022-35163
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...
CVE-2022-35162
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the CATEGORY parameter at /category/controller.php?action=edit...
CVE-2022-35163
CVE-2022-35163 affects Complete Online Job Search System v1.0. A cross-site scripting (XSS) vulnerability exists via the U_NAME parameter at /category/controller.php?action=edit. The NVD entry lists CVSS v3.1 metrics: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N with a base score of 4.8 (Medium). Connecte...
CVE-2022-35163
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...
CVE-2022-35162
Complete Online Job Search System v1.0 contains a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller.php?action=edit. The issue affects the CATEGORY input handling and could allow script execution in the context of the affected application. Publicly docume...
PT-2022-22610 · Unknown · Complete Online Job Search System
Name of the Vulnerable Software and Affected Versions: Complete Online Job Search System version 1.0 Description: A cross-site scripting XSS issue was found in the CATEGORY parameter at the "/category/controller.php?action=edit" API endpoint. This allows for potential malicious script execution...
Complete Online Job Search System 跨站脚本漏洞
Complete Online Job Search System is an online job search system. A security vulnerability exists in Complete Online Job Search System v1.0, which stems from the CATEGORY parameter being found to contain a cross-site scripting XSS vulnerability...
PT-2022-22611 · Unknown · Complete Online Job Search System
Name of the Vulnerable Software and Affected Versions: Complete Online Job Search System version 1.0 Description: A cross-site scripting XSS issue was found in the Complete Online Job Search System. The vulnerability can be exploited via the U NAME parameter at the...
Complete Online Job Search System SQL注入漏洞（CNVD-2022-48790）
Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/employee/index.php?view=edit&id=page Lack of validation of externally entered SQL statements. An attacker could use this...
CVE-2022-32017
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...
CVE-2022-32017
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...
CVE-2022-32017
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...
CVE-2022-32018
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...
CVE-2022-32008
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=...
CVE-2022-32007
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...
CVE-2022-32013
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=...
CVE-2022-32011
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...