| 标题 | code-projects job-recruitment v1.0 php Cross Site Scripting |
|---|
| 描述 | echo $job_type parameter in _call_job_search_ajax.php , There is a cross-site scripting attack vulnerability in Job-recruitment system. The parameter that can be controlled is: $sch . A malicious attacker can obtain sensitive information about administrators.
|
|---|
| 来源 | ⚠️ https://github.com/1337g/CVE-2025-X/blob/main/xss-1_27.md |
|---|
| 用户 | 1337gu (UID 80869) |
|---|
| 提交 | 2025-01-27 15時05分 (2 年前) |
|---|
| 管理 | 2025-01-28 10時24分 (19 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 293903 [code-projects Job Recruitment 1.0 _call_job_search_ajax.php job_type 跨网站脚本] |
|---|
| 积分 | 18 |
|---|