TI-2017-12913 CVE-2017-17642 · GHSA-cvvg-xj5x-rq7p
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
Priority MEDIUM 46
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
Basic Job Site Script Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Basic Job Site Script Project records in CISA KEVNo Basic Job Site Script Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Basic Job Site Script · all components
TI-2017-13124 CVE-2017-17895 · GHSA-995f-4r4p-869m
Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
Priority MEDIUM 44
Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
TI-2017-13123 CVE-2017-17894 · GHSA-w9c7-9h56-43mw
Readymade Job Site Script has CSRF via the /job URI.
Priority LOW 39
Readymade Job Site Script has CSRF via the /job URI.
TI-2017-13125 CVE-2017-17896 · GHSA-j8pq-f7j4-r7v5
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
Priority LOW 28
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.