CVE-2022-29316

概要

参考情報

• hackmd.io/%40taidh/SyioJJGEq

complete online job search system のその他の脆弱性

• CVE-2022-35163中 4.8Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /cat…
• CVE-2022-35162中 4.8Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /c…
• CVE-2022-32018高 7.2Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=.
• CVE-2022-32017高 7.2Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle.
• CVE-2022-32016高 7.2Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany.