PT-2022-18389 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is possible through the "/public html/apply vacancy" API...

PHPGURUKUL Zoo Management System 代码问题漏洞

PHPGURUKUL Zoo Management System is a zoo management system by the PHPGurukul Phpgurukul team. A security vulnerability exists in Zoo Management System v1.0, which stems from the lack of a restriction on the type of file that can be uploaded in /publichtml/applyvacancy, which can be exploited by ...

CVE-2021-41931

The Company's Recruitment Management System in id=2 of the parameter from viewvacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different...

dubaivacancy.ae Improper Access Control vulnerability OBB-2172093

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2013-1353

Orange HRM 2.7.1 allows XSS via the vacancy name...

Cross site scripting

Orange HRM 2.7.1 allows XSS via the vacancy name...

CVE-2013-1353

Orange HRM 2.7.1 allows XSS via the vacancy name...

CVE-2013-1353

CVE-2013-1353 affects Orange HRM 2.7.1 and is documented as a cross-site scripting (XSS) vulnerability via the vacancy name. The linked NVD entry provides CVSS metrics: CVSSv2 base score 3.5 (LOW) and CVSSv3.1 base score 5.4 (MEDIUM). CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:...

Open Positioner: my new project for tracking IT and security jobs

The idea of my new project is to retrieve the data from job-searching websites and provide better filtering, searching and visualization. I think for the most people who read this, searching for a job in Internet is a pretty common activity. Even if you are not going to change job right now, it...

ansonmccade.com XSS vulnerability

Open Bug Bounty ID: OBB-642143 Description| Value ---|--- Affected Website:| ansonmccade.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

datak.ir XSS vulnerability

Open Bug Bounty ID: OBB-623410 Description| Value ---|--- Affected Website:| datak.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brainporttalentbox.com XSS vulnerability

Open Bug Bounty ID: OBB-428579 Description| Value ---|--- Affected Website:| brainporttalentbox.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Career Portal 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Career Portal v1.0 - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/career-portal-online-job-search-script/20767278 Software Link:...

Career Portal 1.0 - SQL Injection

Career Portal 1.0 - SQL Injection Exploit Title: Career Portal v1.0 - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/career-portal-online-job-search-script/20767278 Software Link:...

Career Portal 1.0 - SQL Injection

Exploit Title: Career Portal v1.0 - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/career-portal-online-job-search-script/20767278 Software Link: https://codecanyon.net/item/career-portal-online-job-search-script/20767278 Version: 1.0 Tested on...

Job Vacancy Script SQL Injection

Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Job Vacancy Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-job-bank-job-vacancy-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL...

Job Vacancy Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Job Vacancy Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-job-bank-job-vacancy-script/ Author: Ihsan Sencan Author Web:...

Job Vacancy Script - SQL Injection

Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Job Vacancy Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-job-bank-job-vacancy-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL...

Job Vacancy Script - SQL Injection

Job Vacancy Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Job Vacancy Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-job-bank-job-vacancy-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Ma...

apply.nandos.co.uk XSS vulnerability

Vulnerable URL: http://apply.nandos.co.uk/vacancySearch.php?searchSector=test=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...