CVE-2022-2679

SourceCodester Interview Management System 1.0 exposes a SQL injection in /viewReport.php via the id parameter (payload shown as UPDATEXML(9729,CONCAT(0x2e,0x716b707071,(SELECT (ELT(9729=9729,1))),0x7162766a71),7319)). The vulnerability is remotely exploitable and was disclosed publicly. Affected...

CVE-2022-2685

CVE-2022-2685 affects SourceCodester Interview Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /addQuestion.php handler where the parameter question can be manipulated (example input: ). Exploitation is reported as remote. Connected sources confirm the issue i...

CVE-2022-38255

CVE-2022-38255 concerns Interview Management System v1.0. The vulnerability is a SQL injection in the id parameter of /interview/editQuestion.php. Root cause: unsanitized user input enabling arbitrary SQL execution. Reported by multiple sources (NVD/Red Hat/CVE lists and third-party embeds) with ...

CVE-2022-38260

CVE-2022-38260 affects Interview Management System v1.0. A SQL injection exists in the component /interview/delete.php, exploitable via the query parameters action and id (e.g., /interview/delete.php?action=questiondelete&id=). The issue is confirmed across multiple sources in the connected docum...

CVE-2022-38576

Interview Management System v1.0 is affected by a SQL injection in the /interview/delete.php?action=deletecand&id= endpoint. The root cause is unsanitized input in the deletecand/id parameter leading to SQL injection, with CVSS details indicating a high impact on confidentiality, integrity, and a...

CVE-2025-12939

CVE-2025-12939 affects SourceCodester Interview Management System (up to 1.0). The vulnerability is an SQL injection in the file /addCandidate.php caused by manipulation of the candName parameter. It is exploitable remotely and an exploit has been publicly released. The known impact, per referenc...

CVE-2025-13343

CVE-2025-13343 concerns SourceCodester Interview Management System 1.0. Affected component: the function handling the parameter in /editQuestion.php (parameter: Question). The input manipulation results in cross-site scripting (XSS) and can be exploited remotely. Multiple sources confirm the issu...