| Package | Affected versions | Patched versions |
|---|---|---|
| eyecms | ≤ 2019-10-15 |
An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free