An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is job_id. The function is getJobApplicationsByJobId(). The file is _lib/class.JobApplication.php.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/niteosoft/simplejobscript/issues/9 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-02-06T23:50:22
Updated: 2024-08-04T10:03:46.377Z
Reserved: 2020-02-05T00:00:00
Link: CVE-2020-8645
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-02-07T00:15:09.443
Modified: 2024-11-21T05:39:10.747
Link: CVE-2020-8645
Redhat
No data.