EmployeeRecruitmentSystem requirement board SQL injection

Attackers can steal company data through the hiring program's input fields.

Summary

An SQL injection flaw in the requirement board handler of EmployeeRecruitmentSystem can be exploited remotely. A public exploit exists. Only products no longer supported by the maintainer are affected.

Affected when

Product version no longer supported by the maintainer
Requirement Board feature in use

What to do

No fixed version exists because the product is no longer supported. Stop exposing this program to the internet and consider replacing it. The affected versions are not stated.

Products and platforms

EmployeeRecruitmentSystem

CVE IDs

CVE-2026-122038 (opens in a new tab)

Sources

Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab)
CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-04 22:30 UTC

First seen 2026-11-09 16:20 UTC