Lucene search
+L

10 matches found

NVD
NVD
•added 2026/10/12 6:16 a.m.•7 views

CVE-2026-108806

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/12 6:00 a.m.•34 views

CVE-2026-108806 krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS0.00254EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/12 6:00 a.m.•5 views

EUVD-2026-97245

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/12 6:00 a.m.•10 views

CVE-2026-108806

A SQL injection vulnerability exists in the krupalshah EmployeeRecruitmentSystem (up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe). The flaw is located in the Forgot Password Handler component within the source/authprocessing.php file, specifically affecting the mysql_query function. Manipu...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
NVD
NVD
•added 2025/10/08 8:15 a.m.•19 views

CVE-2025-11443

A weakness has been identified in JhumanJ OpnForm up to 1.9.3. This affects an unknown function of the file /api/password/email of the component Forgotten Password Handler. This manipulation causes information exposure through discrepancy. It is possible to initiate the attack remotely. The attac...

6.3CVSS0.00567EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-47322

Malicious code in bioql PyPI...

6.9CVSS4.9AI score0.00415EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 9:25 a.m.•20 views

CVE-2024-6183

A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of the component Forgot Password Handler. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. VDB-269154 is the identifier assigned to...

6.9CVSS6.2AI score0.00415EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/20 12:15 p.m.•12 views

CVE-2024-6183

A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of the component Forgot Password Handler. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. VDB-269154 is the identifier assigned to...

6.1CVSS3.9AI score0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/20 12:00 a.m.•11 views

PT-2024-37440 · Unknown · Ez-Suite Ez-Partner

Name of the Vulnerable Software and Affected Versions: EZ-Suite EZ-Partner version 5 Description: A vulnerability has been found in the Forgot Password Handler component, leading to basic cross site scripting. The manipulation can be launched remotely. The vendor was contacted about this disclosu...

6.9CVSS6.2AI score0.00415EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/20 12:00 a.m.•8 views

CVE-2024-6183: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of the component Forgot Password Handler. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. VDB-269154 is the identifier assigned to...

6.9CVSS3.9AI score0.00415EPSS
SaveExploits0References1
Rows per page
Query Builder