13 matches found
CVE-2026-10260: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /admin/jobs-admins/delete-jobs.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now...
CVE-2026-7028
VULNERABILITY: CVE-2026-7028 affects CodeAstro Online Job Portal 1.0. An SQL injection is possible in the All Jobs Page via manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php. Exploitation is remote and publicly released; impact is limited to low confidentiality/integrity/avail...
CVE-2026-7028: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...
PT-2026-35209
A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...
CVE-2021-39336
The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to a...
CVE-2021-39336: Improper Neutralization of Input During Web Page Generation
The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to a...
PT-2021-22542
Name of the Vulnerable Software and Affected Versions: Job Manager WordPress plugin versions up to and including 0.7.25 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file...
PT-2021-18391
Name of the Vulnerable Software and Affected Versions CourseMS version 2.1 Description The issue allows an attacker with Admin account access to create a Job Title in the Site area, specifically through the name parameter in admin/add jobs.php, and insert a cross-site scripting XSS payload. This...
whydowork.com XSS vulnerability
Vulnerable URL: http://www.whydowork.com/jobs.php?q="&sa.x;=49&sa.y;=14 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 198995 Google Pagerank| 4 VIP website status:| No Check whydowork.com SSL connection:| Grade...
Sql injection
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to 1 costview2/jobs.php or 2 costview2/printers.php...
CVE-2014-2934: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to 1 costview2/jobs.php or 2 costview2/printers.php...
PT-2014-4964
Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the tr parameter to specific API endpoints, such as "costview2/jobs.php" or "costview2/printers.php". Recommendation...
Multiple Vulnerabilities in ReOS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...