Auieo vulnerabilities

Products

• Candidats 9

Newest

• auieo candidats CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application.... CVE-2022-42751 8.8 HighNovember 3, 2022
• auieo candidats CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This... CVE-2022-42750 8.8 HighNovember 3, 2022
• auieo candidats CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to... CVE-2022-42749 6.1 MediumNovember 3, 2022
• auieo candidats CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external... CVE-2022-42748 6.1 MediumNovember 3, 2022
• auieo candidats CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to... CVE-2022-42747 6.1 MediumNovember 3, 2022
• auieo candidats CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to... CVE-2022-42746 6.1 MediumNovember 3, 2022
• auieo candidats CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application... CVE-2022-42744 9.8 CriticalNovember 3, 2022
• auieo candidats CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m... CVE-2022-25228 6.5 MediumAugust 18, 2022
• auieo candidats CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via... CVE-2020-9341 8.8 HighFebruary 22, 2020