gemonogram.co.kr XSS vulnerability

Vulnerable URL: http://www.gemonogram.co.kr/talent/alert.php?msg= Details: Description| Value ---|--- Patched:| Yes, at 28.09.2015 Latest check for patch:| 28.09.2015 01:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...

Unspecified Vulnerability in Oracle PeopleSoft PeopleSoft Enterprise HCM Talent Acquisition Manager Component

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. A security vulnerability exists in the Oracle PeopleSoft Enterprise PeopleSoft Enterprise HCM Talent Acquisition Manager component, which can be exploited by remote attackers to compromise system integrity...

Security feature bypass

Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Security...

CVE-2015-0467

Technical details for CVE-2015-0467 are not publicly available in the provided documents; no specific affected versions, impact, vectors, or remediation are disclosed. Monitor for updates.

CVE-2015-0467

Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Security...

phpyun人才系(2015-02-03)Sql注入2枚(可删除任意简历)

简要描述： phpyun人才系2015-02-03Sql注入2枚可删除任意简历 无法绕过waf，也就获取不了敏感信息。 详细说明： 代码 /wap/member/model/index.class.php function addresumeaction//复制的较长，可直接略过。 if$this-config'userenforceidentitycert'=="1" $row=$this-obj-DBselectonce"resume","idcardpic'' and uid='".$this-uid."'"; if$row'idcardstatus'!="1"...

Knight talent system 2. override the+1 at the sql injection access to sensitive information-vulnerability warning-the black bar safety net

Here I do not do code analysis, looking directly at me operation The first step, we first register a normal business user The second step, we modify enterprise user information ! Company name',jobsname=user -- sdd Then we access the url: POST /74cmsv3. 5...

CVE-2014-6486

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Talent Acquisition Manager - Security...

Security feature bypass

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Talent Acquisition Manager - Security...

CVE-2014-6486

Technical details about CVE-2014-6486 are not publicly available in the provided documents. No concrete affected products, versions, exploit information, or fixes are specified here. Monitor for updates in subsequent documents.

CVE-2014-6486

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Talent Acquisition Manager - Security...

Freelancer Marketplace Script Upload Vulnerability

No description provided by source. Name : Freelancers Marketplace Script Upload Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Freelancers Marketplace Script Persistent XSS Vulnerability

No description provided by source. Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

PHPYUN cloud talent system background CSRF Getshell-a vulnerability warning-the black bar safety net

phpyun background no authentication token, by the CSRF directly getshell First, from the background getshell start. The web site's configuration file,/plus/config.php using double quotes to do the key value, which leads to security issues. We can put php code to write into the double quotes insid...

CVE-2014-2449

Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

Security feature bypass

Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2014-2449

Technical details about CVE-2014-2449 are not publicly provided in the supplied documents; the connected sources reference the vulnerability at a high level without affected products, versions, impact, or remediation. Monitor for updated, specific disclosures.

php cloud talent system UC API not initialized injection vulnerability-vulnerability warning-the black bar safety net

Detailed description: api/alipaydual/notifyurl.php requireonce"alipay.config.php"; requireonce"lib/alipaynotify.class.php"; requireoncedirnamedirnamedirnameFILE."/ data/db.config.php"; requireoncedirnamedirnamedirnameFILE."/ include/mysql.class.php"; $db = new mysql$dbconfig'dbhost',...

74CMS talent system v3. 2 injection& full version pass rounded out the background-bug warning-the black bar safety net

Because a station with this system next to the station is also no start so went down the parts of the source code to read Set of procedures filter is still relatively full, but all versions are GBK encoding is his flawed but basically the string into the library when the author used the iconv to...

phpyun talent system injection+background getshell-a vulnerability warning-the black bar safety net

Paul id proof 0day - - would have been ready to throw the clouds, but look to have previously submitted a This sets the source of the hole no response..just lost it. No nonsense /model/class/action.class.php 6 0 3 row function funipget if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP",...