Knight CMS suffers from SQL injection vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System version 3.7 suffers from a SQL injection vulnerability, which is exploited by attackers to obtain sensitive information due to unfiltered variable names...

Knight CMS Talent System v3.7 has SQL Injection Vulnerabilities

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 suffers from a SQL injection vulnerability due to numeric variable filtering being missed resulting in injection, allowing remote attackers to exploit the vulnerability by submitting special...

Knight CMS Talent System Arbitrary File Deletion Vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 exists arbitrary file deletion vulnerability, due to the variable $filename does not perform effective filtering, attackers can exploit the vulnerability to traverse the deletion of arbitrar...