Online Job Portal 跨站脚本漏洞

Online Job Portal is an online job search portal. A cross-site scripting vulnerability exists in Online Job Portal version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter News in /Admin/News.php, which can be exploited by an attacker to...

PT-2024-15422 · Unknown · Online Job Portal

Name of the Vulnerable Software and Affected Versions: Online Job Portal version 1.0 Description: A problematic issue was found in the Create News Page component, specifically in the /Admin/News.php file. The manipulation of the News argument with malicious input, such as alert0x00C57D, leads to...

Fastspot BigTree Information Disclosure Vulnerability

Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An information disclosure vulnerability exists in the admin/news/ page in Fastspot BigTree version 4.3, which can be exploited by an attacker to obtain path information...

SQL injection vulnerability in the type parameter of admin_news.php page in Ocean CMS system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminnews.php page of Ocean CMS. The lack of filtering of the "type" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...