2 matches found
Knight CMS Talent System Cross-site Scripting Vulnerability
Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 cross-site scripting vulnerability, attackers can exploit the vulnerability to execute arbitrary script code, steal cookie-based authentication and launch other attacks...
Knight CMS Talent System SQL Injection Vulnerability
Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 exists SQL injection vulnerability, due to the variable $id filtering was omitted to cause injection, attackers use the vulnerability to obtain sensitive information...