EmployeeRecruitmentSystem vulnerabilities
3 known CVE vulnerabilities in EmployeeRecruitmentSystem, translated and rated.
- CVE-2026-108807High
A SQL Injection vulnerability in krupalshah EmployeeRecruitmentSystem (up to a specific commit) affects the mysql_query function in source/adminregister.php of the Registration Handler component, allowing remote SQL injection.
- CVE-2026-108806High
A SQL Injection vulnerability in krupalshah EmployeeRecruitmentSystem (up to a specific commit) affects the mysql_query function in source/authprocessing.php of the Forgot Password Handler component, where manipulation of the fpemail argument leads to SQL injection.
- CVE-2026-108805High
A SQL Injection vulnerability in krupalshah EmployeeRecruitmentSystem (up to a specific commit) affects the mysql_query function in source/loginprocessing.php of the Login Handler component, where manipulation of email/password arguments leads to SQL injection.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS