CVE-2022-25228

CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in…

published August 18, 2022

CVSS
—
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in '/index.php?m=candidates&a=show' via the 'candidateID', in '/index.php?m=joborders&a=show' via the 'jobOrderID' and '/index.php?m=companies&a=show' via the 'companyID' parameter

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01015 · 62.9th percentile
Published
2022-08-18T19:29Z
EPSS history
Timeline
  • 18 AUG 19:29Z
    CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in…
    cvelistv5