Skip to contentAuieo Candidats vulnerabilities
- auieo candidatsCandidATS version 3.0.0 allows an external attacker to elevate privileges in the application....CVE-2022-427518.8 High
- auieo candidatsCandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This...CVE-2022-427508.8 High
- auieo candidatsCandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to...CVE-2022-427496.1 Medium
- auieo candidatsCandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external...CVE-2022-427486.1 Medium
- auieo candidatsCandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to...CVE-2022-427476.1 Medium
- auieo candidatsCandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to...CVE-2022-427466.1 Medium
- auieo candidatsCandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application...CVE-2022-427449.8 Critical
- auieo candidatsCandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m...CVE-2022-252286.5 Medium
- auieo candidatsCandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via...CVE-2020-93418.8 High