EUVD-2005-4621

Malware in sbrugna...

CVE-2024-12968

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function editjobpost of the file /parse/alledits.php. The manipulation of the argument jobtype leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2024-12962

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/alledits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The...

CVE-2024-12978

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function addreq of the file /parse/alledits.php. The manipulation of the argument jid/limit leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-12967 code-projects Job Recruitment _all_edits.php fln_update sql injection

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function flnupdate of the file /parse/alledits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-12939

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function addedu of the file /parse/alledits.php. The manipulation of the argument degree leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

CVE-2024-12883

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /email.php. The manipulation of the argument email leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-11127

A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploi...

Huntflow Enterprise Information Disclosure Vulnerability

Huntflow Enterprise is an efficient recruitment software from the Russian company Huntflow. Huntflow Enterprise suffers from an information disclosure vulnerability that stems from an information disclosure flaw in the login page that could allow an unauthenticated remote user to obtain informati...

PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities

Title: ====== PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities Date: ===== 2012-06-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=616 VL-ID: ===== 616 Common Vulnerability Scoring System: ==================================== 2.3 Introduction: =============...

PHP Jobsite 1.36 Cross Site Scripting

Exploit for php platform in category web applications PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities Introduction: ============= PHP-Jobsite v1.36 Content Management System. Recruitment software made Easy. PHP-Jobsite - Price US - $299 Software Overview: - Run your own job software...

PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities

Document Title: =============== PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=616 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 61...

PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities

Document Title: =============== PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=616 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 61...

CVE-2005-4626

Technical details for CVE-2005-4626 are not publicly available in the provided documents; the connected records do not confirm affected product versions, root cause, or remediation. Monitor for updates.

CVE-2005-4626

The default configuration of Recruitment Software installs admin/site.xml under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information MySQL database credentials via a direct request...