Skip to content
OpenAdvisories

Archive

1 January 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Feed

  • Medium 6.3

    code-projects Job Recruitment _feedback_system.php sql injection

    A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /_parse/_feedback_system.php. The manipulation of the argument person leads to sql injection. It is possible to initiate the a…

  • Medium 6.1

    Travel Tour < 5.2.4 - Reflected XSS

    The does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin