Complete Online Job Search System SQL Injection Vulnerability

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/index.php?q=result&searchfor=bytitle page missing validation of external input SQL statements. An attacker could use this...

PT-2022-21045

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /eris/index.php?q=result&searchfor=bytitle API endpoint. The searchfor parameter, specifically when set to bytitle, is...