Jobberbase

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jobberbase records in CISA KEV

No Jobberbase vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2019-14679 CVE-2019-20447 · GHSA-3jvw-73q9-5f3x

MEDIUM 46

Jobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01986 Published 2020-02-05 No fix listed CWE-89

TI-2019-12115 CVE-2019-16125 · GHSA-697g-wjpp-pfqr

MEDIUM 46

In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0219 Published 2019-09-09 No fix listed CWE-89