Priority LOW 23
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /category/controller.php?action=edit.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00531 · Published 2022-08-05 · No fix listed CWE-79
Priority LOW 23
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller.php?action=edit.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00531 · Published 2022-08-05 · No fix listed CWE-79
Priority LOW 39
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04563 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/applicants/index.php?view=view&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/employee/index.php?view=edit&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/category/index.php?view=edit&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01354 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 39
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04563 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 34
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bytitle.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01011 · Published 2022-06-02 · No fix listed CWE-89
Priority LOW 39
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04563 · Published 2022-06-02 · No fix listed CWE-89
Priority MEDIUM 48
Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancesearch.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03315 · Published 2022-05-11 · No fix listed CWE-89
THREATIST.IORead the docs