الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

朝阳

#11148من 60,596
28.8إجمالي CVSS
الثغرات · 4
عالية
4
PT-2022-21036
2022-06-02
7.2
CVE-2022-32007
Unknown
Complete Online Job Search System
The issue concerns a SQL Injection vulnerability. It can be exploited via the "/eris/admin/company/index.php?view=edit&id=" API endpoint, specifically through the `id` variable. This allows for potential unauthorized access and manipulation of database content.
PT-2022-21037
2022-06-02
7.2
CVE-2022-32008
Unknown
Complete Online Job Search System
The issue concerns SQL Injection. It can be exploited via the `/eris/admin/vacancy/index.php` endpoint, specifically when the `view` parameter is set to `edit` and the `id` parameter is manipulated.
PT-2022-21038
2022-06-02
7.2
CVE-2022-32010
Unknown
Complete Online Job Search System
The issue is related to SQL Injection via the "/eris/admin/user/index.php?view=edit&id=" endpoint. The `id` variable is vulnerable to SQL injection attacks. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
PT-2022-21039
2022-06-02
7.2
CVE-2022-32011
Unknown
Complete Online Job Search System
The issue is related to SQL Injection, which can be exploited via the "/eris/admin/applicants/index.php?view=view&id=" endpoint. The `id` variable is vulnerable to injection attacks. No information is provided about the estimated number of potentially affected devices or real-world incidents.