CVE-2026-38566

The interview management platform HireFlow v1.2 is vulnerable to Cross-Site Request Forgery (CSRF) because it lacks CSRF token validation on state-changing POST endpoints and fails to configure the SESSION_COOKIE_SAMESITE attribute. An attacker can trick an authenticated user into visiting a mali...

CVE-2026-38566

HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms password change at /profile, candidate deletion at /candidates/delete/, feedback submission at /feedback/add/, interview scheduling at /interviews/add are vulnerable to CSRF. An attacker who can...

EUVD-2022-41154

Malicious code in bioql PyPI...

CVE-2022-38576

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand=...

CVE-2022-38576

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand&id=...

CVE-2022-38576

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand&id=...

Interview Management System SQL注入漏洞

Interview Management System is an interview management system for janobe individual developers. Interview Management System v1.0 version has a security vulnerability, the vulnerability stems from the /interview/delete.php?action=deletecand&id=component that allows an attacker to achieve SQL...