CVE-2022-32014

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-32015

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

CVE-2022-32015

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

CVE-2022-32011

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-32007

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...

Sql injection

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...

Sql injection

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-32007

Complete Online Job Search System v1.0 is affected by an SQL Injection in the admin path /eris/admin/company/index.php?view=edit&id=. The root cause is improper input handling leading to SQL query manipulation. Impact described across sources includes potential data disclosure, data modification,...

CVE-2022-32008

CVE-2022-32008 affects Complete Online Job Search System v1.0. The vulnerability is an SQL injection in eris/admin/vacancy/index.php?view=edit&id= (missing input validation). Documented across multiple sources (CNVD/CNNVD/NVD/Red Hat), indicating the input parameter can be exploited to execute ar...

CVE-2022-32010

CVE-2022-32010 affects Complete Online Job Search System v1.0. The vulnerability is a SQL injection through /eris/admin/user/index.php?view=edit&id=, resulting from insufficient input validation. Documented impacts include potential unauthorized data exposure, tampering, and disruption (CVSS v3.1...

CVE-2022-32011

CVE-2022-32011 affects Complete Online Job Search System v1.0. The vulnerability is SQL Injection via /eris/admin/applicants/index.php?view=view&id=, caused by lack of input validation for external input in SQL statements. Related connected sources (CNVD/Red Hat/NVD/CVE listings) corroborate the ...

CVE-2022-32012

CVE-2022-32012 affects Complete Online Job Search System v1.0 and is a SQL Injection vulnerability exploitable via /eris/admin/employee/index.php?view=edit&id=. The root cause is lack of validation of externally entered SQL statements in that endpoint, enabling an attacker to execute arbitrary SQ...

CVE-2022-32013

CVE-2022-32013 affects the Complete Online Job Search System v1.0. The vulnerability is a SQL Injection in the page eris/admin/category/index.php?view=edit&id=, arising from missing validation of external input for SQL statements. The root cause is inadequate input handling that allows an attacke...

CVE-2022-32014

CVE-2022-32014 affects Complete Online Job Search System v1.0. The vulnerability is a SQL Injection in /eris/index.php?q=result&searchfor=byfunction caused by lack of input validation. Impact described in CNVD/PRION/Red Hat/NVD entries includes potential to execute illegal SQL commands and access...

CVE-2022-32015

Complete Online Job Search System 1.0 is vulnerable to SQL injection via /eris/index.php?q=category&search=. The issue, repeatedly reported across CVE-2022-32015 records (NVD, NUCLEI template, CNVD, RH and others), indicates that unsanitized input to the category search parameter allows an attack...

CVE-2022-32016

CVE-2022-32016 affects Complete Online Job Search System v1.0, with a SQL Injection vulnerability in the web path /eris/index.php?q=result&searchfor=bycompany. The issue stems from unsafely constructed SQL statements in the affected page, enabling an attacker to manipulate queries and potentially...

CVE-2022-32018

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from the /eris/index.php?q=result&searchfor=byfunction page Lack of validation of external input SQL statements. An attacker could use this...

CVE-2022-29316

Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancesearch...