Company's Recruitment Management System 1.0 Cross Site Scripting

Exploit Title: Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting XSS Date: 17-10-2021 Exploit Author: Aniket Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html Software Lin...

Company's Recruitment Management System 1.0 Cross Site Request Forgery

Exploit Title: Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery CSRF Date: 18-10-2021 Exploit Author: Aniket Anil Deshmane Vendor Homepage: https://www.sourcecodester.com/php/14959/companys-recruitment-management-system-php-and-sqlite-free-source-code.html...

迅易科技 74cms SQL注入漏洞

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...

Command Execution Vulnerability in PHPYUN Talent Acquisition System beta (CNVD-2021-26194)

PHPYUN Talent Recruitment System is a PHP and MySQL database to build an efficient and open source talent and enterprise job search recruitment, hiring solutions. A command execution vulnerability exists in the beta version of PHPYUN Recruitment System. An attacker can exploit this vulnerability ...

74cms 6.0.20 suffers from a logic flaw vulnerability (CNVD-2021-25005)

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to compromise the integrity of the system...

Xunyi Technology 74cms Security Breach

XUNYI TECHNOLOGY 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in 74cms version 5.0.1, which originates from a remote code execution vulnerability in the application management controller ConfigController.class.php an...

Knight CMS suffers from SQL injection vulnerability (CNVD-2021-09683)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Knight CMS of Taiyuan Xunyi Technology Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-58523)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS is vulnerable to SQL injection. Attackers can use the vulnerability to obtain sensitive information in the database...

Logic Flaw Vulnerability in Talent Recruitment System of Lian Yi Technology Co.

Lianyi Technology Co., Ltd. provides universities and colleges to provide management, service, teaching, research and other full-scene products and services. A logic flaw exists in the Talent Recruitment System of Lianyi Technology Company Limited, which can be exploited by an attacker to reset a...

74cms Arbitrary File Deletion Vulnerability

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete any file...

Arbitrary File Deletion Vulnerability in Knight Talent System

Knight Talent System is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight Talent System has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

Logic Flaw Vulnerability in Golden Intelligence Education Talent Acquisition System

Jinzhi Education Talent Recruitment System is a full-process management of online recruitment for colleges and universities. Candidates can submit their resumes through the network, and managers can screen and review resumes through the system. A logic flaw vulnerability exists in the Jinzhi...

SQL Injection Vulnerability in 74cms

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms SQL injection vulnerability, attackers can use the vulnerability to obtain...

74cms backend Hr***.cl***.ph page has arbitrary file download vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Hr.cl.ph page there are arbitrary file download vulnerability. Attacker...

74cms v4.2.111 xss vulnerability in enterprise profile management page

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms v4.2.111 enterprise data management page there are xss vulnerabilities , attacker...

SQL Injection Vulnerability in 74cms v4.2.111 Cookie

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms v4.2.111 Cookie SQL injection vulnerability, an attacker can use the vulnerabilit...

74cms has an override access vulnerability

74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms has an unauthorized access vulnerability. An attacker can use this vulnerability to gain unauthorized access to other people's messages...

CIIC Xi'an Recruitment System Exploits Universal Password Login Vulnerability

CIIC Xi'an Recruitment System is a resume information saving and entry system. CIIC Xi'an Recruitment System suffers from a universal password login vulnerability. An attacker who enters the universal password 'or '1'='1 or 'or'='or' can log in and view sensitive user information...

A Recruitment System 0day a gold-bug warning-the black bar safety net

Google: the keywords: inurl:IndexPerson. asp inurl:headhunt ! Use steps: 1. Front Desk registered users 2. Upload photos ! 3. Capture 4. Modification packet nc truncated to submit ! If the directory can not write the situation, change the Upload Directory to...

taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV103$2009 ----------------------------------------------------------------------------------------- ECHOADV103$2009 taifajobs = 1.0 jobid Remote SQL Injection Vulnerability...