CVE-2026-9237: Missing Authorization

The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

EUVD-2025-17019

Malicious code in bioql PyPI...

EUVD-2025-20292

Malicious code in bioql PyPI...

EUVD-2025-21102

Malicious code in bioql PyPI...

EUVD-2025-24677

Malicious code in bioql PyPI...

EUVD-2021-28928

Malicious code in bioql PyPI...

CVE-2025-9920: External Control of File Name or Path

A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2025-8950: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

Campcodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in...

CVE-2025-8336 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8334

CVE-2025-8334 describes a SQL injection vulnerability in Campcodes Online Recruitment Management System 1.0. The issue affects a portion of the code handling the file /admin/ajax.php?action=delete_recruitment_status, where the parameter ID can be manipulated to trigger a SQL injection. The vulner...

CVE-2025-8334 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

CVE-2025-8334 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

PT-2025-31452 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical vulnerability exists in Campcodes Online Recruitment Management System. The vulnerability is due to SQL injection, stemming from manipulation of the ID argumen...

CVE-2025-8334: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

CVE-2025-8336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8274

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...

CVE-2025-8274 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...

CVE-2025-8274

The CVE-2025-8274 entry concerns Campcodes Online Recruitment Management System 1.0. A SQL injection affects an unknown function exposed at /admin/ajax.php?action=save_recruitment_status via manipulation of the ID parameter. It is remotely exploitable and the exploit has been disclosed publicly. ...

CVE-2025-8274: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...