CVE-2025-15126

JeecgBoot up to version 3.9.0 is affected by an authorization issue in the getPositionUserList function (/sys/position/getPositionUserList). Manipulating the positionId parameter can lead to improper authorization and information exposure. Attacks may be remotely executable; exploitation is descr...

CVE-2025-5677

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=saveapplication. The manipulation of the argument positionid leads to sql injection. The attack may be...