Lucene search
+L

7696 matches found

CNNVD
CNNVD
added 2024/11/12 12:00 a.m.11 views

Job Recruitment 注入漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in code-projects Job Recruitment version 1.0, which originates from an SQL injection vulnerability in the email parameter of the /login.php page...

9.8CVSS7.8AI score0.00604EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.10 views

Job Recruitment 注入漏洞

Job Recruitment is a job portal project developed by code-projects using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in Job Recruitment version 1.0, which stems from an SQL injection vulnerability in the userid parameter of the admin.php page...

8.8CVSS7AI score0.00509EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/11 8:15 p.m.9 views

CVE-2024-11078

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS3.8AI score0.00413EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/11 7:31 p.m.74 views

CVE-2024-11078

Code-projects Job Recruitment 1.0 is affected by CVE-2024-11078. A cross-site scripting vulnerability exists in the /register.php page, where the e/role parameter can be manipulated to trigger XSS. The issue is exploitable remotely and has publicly disclosed exploit information. Connected sources...

5.4CVSS4AI score0.00413EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/11 7:31 p.m.15 views

CVE-2024-11078 code-projects Job Recruitment register.php cross site scripting

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross site scripting. The attack can be launched remotely. The...

5.3CVSS4.4AI score0.00413EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/11 7:15 p.m.30 views

CVE-2024-11077

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

9.8CVSS0.00652EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/11 7:15 p.m.5 views

CVE-2024-11077

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

9.8CVSS5.7AI score0.00652EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/11 6:31 p.m.57 views

CVE-2024-11077

CVE-2024-11077 affects code-projects Job Recruitment 1.0. The vulnerability is a SQL injection in an unknown function within /index.php triggered by manipulating the email parameter. Exploitation is remote and was disclosed publicly. Impact is described as high/critical across sources, with poten...

9.8CVSS7.7AI score0.00652EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2024/11/11 6:31 p.m.36 views

CVE-2024-11077 code-projects Job Recruitment index.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

7.5CVSS0.00652EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/11 6:15 p.m.6 views

CVE-2024-11076

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument ehash leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.7AI score0.00572EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/11 6:15 p.m.32 views

CVE-2024-11076

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument ehash leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/11 6:00 p.m.12 views

CVE-2024-11076 code-projects Job Recruitment activation.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument ehash leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS7.4AI score0.00572EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/11 6:00 p.m.81 views

CVE-2024-11076

This CVE-2024-11076 affects code-projects Job Recruitment 1.0. The vulnerability is located in the activation.php handler, where manipulating the e_hash parameter allows SQL injection. Impact is described as remote exploitation with high potential impact (SQL injection in a user-facing activation...

9.8CVSS7.1AI score0.00572EPSS
SaveExploits1References5Affected Software1
Patchstack
Patchstack
added 2024/11/11 12:07 p.m.7 views

WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by casol Patchstack Alliance in WordPress Plugin WP Job Portal versions = 2.2.0...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/11 12:00 a.m.20 views

WordPress WP Job Portal Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Job Portal Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52389 Patch priority Medium CVSS severity Medium 6.5 Developer Ahmad PSID 3e42293c0184 Credits casol Required privilege Subscriber Publishe...

6.5CVSS6.5AI score0.00248EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.5 views

Job Recruitment 安全漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. A security vulnerability exists in Job Recruitment version 1.0, which originates from a SQL injection vulnerability in the email parameter of the /index.php page...

9.8CVSS7.8AI score0.00652EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.17 views

Job Recruitment 安全漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. A security vulnerability exists in Job Recruitment version 1.0, which originates from an SQL injection vulnerability in the ehash parameter of the /activation.php page...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.13 views

PT-2024-16741 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A high-severity vulnerability has been identified in code-projects Job Recruitment. The vulnerability affects an unknown functionality of the file /register.php. The manipulation of the...

5.4CVSS4.3AI score0.00413EPSS
SaveExploits1References29
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/10 2:13 p.m.7 views

Malicious code in careers-job-detail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16052b4d2e03953110406185695adc84ab3af8481eb5790e4b4c0f1421bc1b9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
NVD
NVD
added 2024/11/09 9:15 a.m.16 views

CVE-2024-51602

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in oleksandr87 Simple Job Manager simple-job-manager allows SQL Injection.This issue affects Simple Job Manager: from n/a through = 1.1...

8.5CVSS0.00395EPSS
SaveExploits0References1
Rows per page
Query Builder