PT-2022-21042

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /eris/index.php?q=result&searchfor=byfunction endpoint. The searchfor parameter is vulnerable, specifically when set to...

CVE-2022-32014: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...