Lucene search
+L

90 matches found

CNNVD
CNNVD
added 2022/06/23 12:0 a.m.4 views

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/downresume/total/nature lack of data validation filtering of user-supplied data and output. An attacker...

6.1CVSS5.6AI score0.00632EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.5 views

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in /index/notice/show. An attacker could exploit...

6.1CVSS5.6AI score0.00632EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.4 views

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cms version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /index/jobfairol/show/ lack of data validation filtering for user-supplied data and output. An attacker...

6.1CVSS5.7AI score0.00632EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.7 views

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/viewbebrowsed/total missing data validation filters for user-supplied data and output. An...

6.1CVSS5.7AI score0.00632EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.6 views

74cms SQL注入漏洞

74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of externally entered SQL statements in the keyword parameter of /home/campus/campusjob. An attacker...

7.5CVSS6.1AI score0.00923EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.9 views

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output from path/job. An attacker could exploit this vulnerabili...

6.1CVSS5.6AI score0.00632EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in version 74cmsSE v3.5.1, which originates from an arbitrary file read vulnerability in indexcontrollerDownload.php...

7.5CVSS7.5AI score0.00932EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2021/10/18 12:0 a.m.316 views

Company's Recruitment Management System 1.0 Cross Site Scripting

Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting XSS Date: 17-10-2021 Exploit Author: Aniket Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html Software Lin...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/10/18 12:0 a.m.332 views

Company's Recruitment Management System 1.0 Cross Site Request Forgery

Exploit Title: Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery CSRF Date: 18-10-2021 Exploit Author: Aniket Anil Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html...

0.2AI score
SaveExploits0
0day.today
0day.today
added 2021/10/18 12:0 a.m.379 views

Company's Recruitment Management System 1.0 - (Add New user) CSRF Vulnerability

Exploit Title: Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery CSRF Exploit Author: Aniket Anil Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html Software Link:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/10/18 12:0 a.m.296 views

Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)

Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting XSS Date: 17-10-2021 Exploit Author: Aniket Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html Software Lin...

5.3AI score
SaveExploits0
CNNVD
CNNVD
added 2021/06/16 12:0 a.m.11 views

迅易科技 74cms SQL注入漏洞

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...

9.8CVSS6AI score0.08579EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/03/31 12:0 a.m.4 views

Command Execution Vulnerability in PHPYUN Talent Acquisition System beta (CNVD-2021-26194)

PHPYUN Talent Recruitment System is a PHP and MySQL database to build an efficient and open source talent and enterprise job search recruitment, hiring solutions. A command execution vulnerability exists in the beta version of PHPYUN Recruitment System. An attacker can exploit this vulnerability ...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/24 12:0 a.m.4 views

74cms 6.0.20 suffers from a logic flaw vulnerability (CNVD-2021-25005)

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to compromise the integrity of the system...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2021/02/17 12:0 a.m.7 views

Xunyi Technology 74cms Security Breach

XUNYI TECHNOLOGY 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in 74cms version 5.0.1, which originates from a remote code execution vulnerability in the application management controller ConfigController.class.php an...

9.8CVSS7.8AI score0.04414EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/01/23 12:0 a.m.4 views

Knight CMS suffers from SQL injection vulnerability (CNVD-2021-09683)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/09/09 12:0 a.m.2 views

Knight CMS of Taiyuan Xunyi Technology Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-58523)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS is vulnerable to SQL injection. Attackers can use the vulnerability to obtain sensitive information in the database...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/07/21 12:0 a.m.3 views

Logic Flaw Vulnerability in Talent Recruitment System of Lian Yi Technology Co.

Lianyi Technology Co., Ltd. provides universities and colleges to provide management, service, teaching, research and other full-scene products and services. A logic flaw exists in the Talent Recruitment System of Lianyi Technology Company Limited, which can be exploited by an attacker to reset a...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/06/09 12:0 a.m.2 views

74cms Arbitrary File Deletion Vulnerability

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete any file...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/05/06 12:0 a.m.3 views

Arbitrary File Deletion Vulnerability in Knight Talent System

Knight Talent System is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight Talent System has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

7.1AI score
SaveExploits0
Rows per page
Query Builder