Witiers

**Nome do Software Vulnerável e Versões Afetadas** CodeAstro Online Job Portal versão 1.0 **Descrição** Existe um problema no endpoint `/users/update-profile.php` onde a manipulação do argumento `Name` permite o upload irrestrito. Esta falha pode ser explorada remotamente. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.