إرسال #490056: code-projects job-recruitment v1.0 php Cross Site Scriptingالمعلومات

عنوانcode-projects job-recruitment v1.0 php Cross Site Scripting
الوصفecho $job_type parameter in _call_job_search_ajax.php , There is a cross-site scripting attack vulnerability in Job-recruitment system. The parameter that can be controlled is: $sch . A malicious attacker can obtain sensitive information about administrators.
المصدر⚠️ https://github.com/1337g/CVE-2025-X/blob/main/xss-1_27.md
المستخدم
 1337gu (UID 80869)
ارسال27/01/2025 03:05 PM (2 سنوات منذ)
الاعتدال28/01/2025 10:24 AM (19 hours later)
الحالةتمت الموافقة
إدخال VulDB293903 [code-projects Job Recruitment 1.0 _call_job_search_ajax.php job_type البرمجة عبر المواقع]
النقاط18

Interested in the pricing of exploits?

See the underground prices here!