86 matches found
CVE-2022-35163
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...
The vulnerability of Microsoft Bing’s search system, related to the lack of authentication for a critical function, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Bing’s search system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Online Job Search System 1.0 Arbitrary File Upload
============================================================================================================================================= | Title : Online Job Search System 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
CVE-2022-35162
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the CATEGORY parameter at /category/controller.php?action=edit...
CVE-2022-35163
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...
CVE-2022-35163
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...
CVE-2022-35163
CVE-2022-35163 affects Complete Online Job Search System v1.0. A cross-site scripting (XSS) vulnerability exists via the U_NAME parameter at /category/controller.php?action=edit. The NVD entry lists CVSS v3.1 metrics: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N with a base score of 4.8 (Medium). Connecte...
CVE-2022-35162
Complete Online Job Search System v1.0 contains a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller.php?action=edit. The issue affects the CATEGORY input handling and could allow script execution in the context of the affected application. Publicly docume...
Complete Online Job Search System 跨站脚本漏洞
Complete Online Job Search System is an online job search system. A security vulnerability exists in Complete Online Job Search System v1.0, which stems from the CATEGORY parameter being found to contain a cross-site scripting XSS vulnerability...
PT-2022-22611 · Unknown · Complete Online Job Search System
Name of the Vulnerable Software and Affected Versions: Complete Online Job Search System version 1.0 Description: A cross-site scripting XSS issue was found in the Complete Online Job Search System. The vulnerability can be exploited via the U NAME parameter at the...
PT-2022-22610 · Unknown · Complete Online Job Search System
Name of the Vulnerable Software and Affected Versions: Complete Online Job Search System version 1.0 Description: A cross-site scripting XSS issue was found in the CATEGORY parameter at the "/category/controller.php?action=edit" API endpoint. This allows for potential malicious script execution...
Complete Online Job Search System SQL注入漏洞（CNVD-2022-48790）
Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/employee/index.php?view=edit&id=page Lack of validation of externally entered SQL statements. An attacker could use this...
CVE-2022-32018
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=...
CVE-2022-32017
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...
CVE-2022-32017
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...
CVE-2022-32017
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...
CVE-2022-32007
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=...
CVE-2022-32008
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=...