CVE-2026-38566

The interview management platform HireFlow v1.2 is vulnerable to Cross-Site Request Forgery (CSRF) because it lacks CSRF token validation on state-changing POST endpoints and fails to configure the SESSION_COOKIE_SAMESITE attribute. An attacker can trick an authenticated user into visiting a mali...

CVE-2022-38576

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand=...

CVE-2022-38576

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand&id=...