CVE-2023-3826

CVE-2023-3826 affects IBOS OA 4.5.5 in the Interview Handler component, via the file path /?r=recruit/resume/edit&op=status where manipulating the resumeid parameter yields a SQL injection. The issue is exploitable remotely and can impact confidentiality, integrity, and availability as described ...

CVE-2023-3826 IBOS OA Interview edit&op=status sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can...