ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp.
Affected Software
Name |
Vendor |
Start Version |
End Version |
I-class |
Applyyourself |
* |
* |
References