CVE-2022-32014

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-32015

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

CVE-2022-32015

Complete Online Job Search System 1.0 is vulnerable to SQL injection via /eris/index.php?q=category&search=. The issue, repeatedly reported across CVE-2022-32015 records (NVD, NUCLEI template, CNVD, RH and others), indicates that unsanitized input to the category search parameter allows an attack...

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

CVE-2022-32016

CVE-2022-32016 affects Complete Online Job Search System v1.0, with a SQL Injection vulnerability in the web path /eris/index.php?q=result&searchfor=bycompany. The issue stems from unsafely constructed SQL statements in the affected page, enabling an attacker to manipulate queries and potentially...

CVE-2022-32017

CVE-2022-32017 affects Complete Online Job Search System v1.0. Multiple connected sources confirm a SQL Injection vulnerability in /eris/index.php?q=result&searchfor=bytitle, arising from missing validation of external input. CNVD and RH/Red Hat entries describe the same flaw as a SQL injection t...

CVE-2022-32017

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...

CVE-2022-32018

CVE-2022-32018 affects the software Complete Online Job Search System v1.0 . The vulnerability is a SQL Injection via the URL path /eris/index.php?q=hiring&search= (input passed to a query is not properly validated). Per connected documents, an attacker could potentially exhaustively extract data...

CVE-2022-32018

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from the over/eris/index.php?q=result&searchfor=bycompany page Lack of validation of external input SQL statements. An attacker could use thi...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from the /eris/index.php?q=result&searchfor=byfunction page Lack of validation of external input SQL statements. An attacker could use this...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/index.php?q=category&search=page missing validation of external input SQL statements. An attacker could use this vulnerability to...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. complete Online Job Search System is vulnerable to SQL injection, which originates from eris/admin/category/index.php?view=edit & id=page missing validation of external input SQL statements. An attacker could use this vulnerability...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/index.php?q=result&searchfor=bytitle page missing validation of external input SQL statements. An attacker could use this...

GitLab 授权问题漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. GitLab Community Edition and GitLab Enterprise Edition have an authorization issue...

Complete Online Job Search System SQL注入漏洞

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/applicants/index.php?view=view&id= The page lacks validation for external input SQL statements. An attacker could use this...

LinkedIn: Can access the job name, creator name and can report any draft/under review/rejected job

The application has a functionality using which a user can report a job if he found the job is misleading/spam or fraud. Using this feature, an attacker can do report any unlisted draft/under review/rejected job. After reporting the job the victim will receive an email from 'LinkedIn Trust & Safe...

GHSA-4F6X-G5VH-8JM5 Stored XSS vulnerability in Jenkins Active Choices Plugin

Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. Jenkins Active Choices Plugin 2.5.3 escapes reference parameter values...

GHSA-485Q-V457-3P58 Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin

Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin

Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...