CVE-2022-32014

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-32014

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-32011

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-32013

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=...

CVE-2022-32011

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

CVE-2022-32008

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=...

CVE-2022-32013

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=...

CVE-2022-32015

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

Sql injection

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=...

Sql injection

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle...

CVE-2022-32007

Complete Online Job Search System v1.0 is affected by an SQL Injection in the admin path /eris/admin/company/index.php?view=edit&id=. The root cause is improper input handling leading to SQL query manipulation. Impact described across sources includes potential data disclosure, data modification,...

CVE-2022-32008

CVE-2022-32008 affects Complete Online Job Search System v1.0. The vulnerability is an SQL injection in eris/admin/vacancy/index.php?view=edit&id= (missing input validation). Documented across multiple sources (CNVD/CNNVD/NVD/Red Hat), indicating the input parameter can be exploited to execute ar...

CVE-2022-32010

CVE-2022-32010 affects Complete Online Job Search System v1.0. The vulnerability is a SQL injection through /eris/admin/user/index.php?view=edit&id=, resulting from insufficient input validation. Documented impacts include potential unauthorized data exposure, tampering, and disruption (CVSS v3.1...

CVE-2022-32011

CVE-2022-32011 affects Complete Online Job Search System v1.0. The vulnerability is SQL Injection via /eris/admin/applicants/index.php?view=view&id=, caused by lack of input validation for external input in SQL statements. Related connected sources (CNVD/Red Hat/NVD/CVE listings) corroborate the ...

CVE-2022-32012

CVE-2022-32012 affects Complete Online Job Search System v1.0 and is a SQL Injection vulnerability exploitable via /eris/admin/employee/index.php?view=edit&id=. The root cause is lack of validation of externally entered SQL statements in that endpoint, enabling an attacker to execute arbitrary SQ...

CVE-2022-32013

CVE-2022-32013 affects the Complete Online Job Search System v1.0. The vulnerability is a SQL Injection in the page eris/admin/category/index.php?view=edit&id=, arising from missing validation of external input for SQL statements. The root cause is inadequate input handling that allows an attacke...

CVE-2022-32014

CVE-2022-32014 affects Complete Online Job Search System v1.0. The vulnerability is a SQL Injection in /eris/index.php?q=result&searchfor=byfunction caused by lack of input validation. Impact described in CNVD/PRION/Red Hat/NVD entries includes potential to execute illegal SQL commands and access...

CVE-2022-32015

Complete Online Job Search System 1.0 is vulnerable to SQL injection via /eris/index.php?q=category&search=. The issue, repeatedly reported across CVE-2022-32015 records (NVD, NUCLEI template, CNVD, RH and others), indicates that unsanitized input to the category search parameter allows an attack...

CVE-2022-32016

CVE-2022-32016 affects Complete Online Job Search System v1.0, with a SQL Injection vulnerability in the web path /eris/index.php?q=result&searchfor=bycompany. The issue stems from unsafely constructed SQL statements in the affected page, enabling an attacker to manipulate queries and potentially...