CVE-2017-14511

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

CVE-2017-14511

CVE-2017-14511 affects SAP E-Recruiting (ERECRUIT) versions 605 through 617. An external applicant who registers receives an email verification link, but the verification mechanism can be bypassed, allowing attackers to register and confirm email addresses they do not own. The underlying issues c...

CVE-2017-14511

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

SAP E-Recruiting Email Verification Bypass Vulnerability

SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability. title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage: https://www.sap.c...

SAP E-Recruiting Email Verification Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage:...

rokkguild.guildlaunch.com XSS vulnerability

Vulnerable URL: https://rokkguild.guildlaunch.com/recruiting/login.php?destination=INFOSEC.COM.BR"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

greathousehlaalu.com XSS vulnerability

Vulnerable URL: http://www.greathousehlaalu.com/recruiting/login.php?destination=INFOSEC.COM.BR"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

icedearthguild.com XSS vulnerability

Vulnerable URL: http://www.icedearthguild.com/recruiting/login.php?destination=test"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

legacyoflight.swtorhost.com XSS vulnerability

Open Bug Bounty ID: OBB-279242 Description| Value ---|--- Affected Website:| legacyoflight.swtorhost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

recruiting.generali.it XSS vulnerability

Vulnerable URL: http://recruiting.generali.it/candidaturaspontanea.php?idan="=naz=Italiareg=Laziopro=Romacom=Roma=Aldo=Rossi=01-01-1980=M=1nazione==7=RM=H501=LDARSS80A01H501R=butt=Prosegui Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.11.2017 Vulnerability type:| XS...

vertigo.gamerlaunch.com XSS vulnerability

Vulnerable URL: http://vertigo.gamerlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

legendary.gamerlaunch.com XSS vulnerability

Vulnerable URL: http://legendary.gamerlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

blackthornes.com XSS vulnerability

Vulnerable URL: http://www.blackthornes.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

wumbology.wowlaunch.com XSS vulnerability

Vulnerable URL: http://wumbology.wowlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

alliance-templars.com XSS vulnerability

Vulnerable URL: http://www.alliance-templars.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

boundersoftheshire.com XSS vulnerability

Vulnerable URL: http://www.boundersoftheshire.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

plush-gnome.com XSS vulnerability

Vulnerable URL: http://www.plush-gnome.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

dizzarian.com XSS vulnerability

Vulnerable URL: http://www.dizzarian.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

tempestarii.co.uk XSS vulnerability

Vulnerable URL: http://www.tempestarii.co.uk/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Jobvite Recruitment Service Website Vulnerable to Hackers

Jobvite, a recruiting platform for the social web, is found vulnerable to the most common, but critical web application vulnerabilities that could allow an attacker to compromise and steal the database of the company's website. Jobvite is a Social recruiting and applicant tracking created for...