Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

朝阳

#11148of 60,596
28.8Total CVSS
Vulnerabilities · 4
High
4
PT-2022-21036
2022-06-02
7.2
CVE-2022-32007
Unknown
Complete Online Job Search System
The issue concerns a SQL Injection vulnerability. It can be exploited via the "/eris/admin/company/index.php?view=edit&id=" API endpoint, specifically through the `id` variable. This allows for potential unauthorized access and manipulation of database content.
PT-2022-21037
2022-06-02
7.2
CVE-2022-32008
Unknown
Complete Online Job Search System
The issue concerns SQL Injection. It can be exploited via the `/eris/admin/vacancy/index.php` endpoint, specifically when the `view` parameter is set to `edit` and the `id` parameter is manipulated.
PT-2022-21038
2022-06-02
7.2
CVE-2022-32010
Unknown
Complete Online Job Search System
The issue is related to SQL Injection via the "/eris/admin/user/index.php?view=edit&id=" endpoint. The `id` variable is vulnerable to SQL injection attacks. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
PT-2022-21039
2022-06-02
7.2
CVE-2022-32011
Unknown
Complete Online Job Search System
The issue is related to SQL Injection, which can be exploited via the "/eris/admin/applicants/index.php?view=view&id=" endpoint. The `id` variable is vulnerable to injection attacks. No information is provided about the estimated number of potentially affected devices or real-world incidents.