Read the docs

niteosoft

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

niteosoft records in CISA KEV

No niteosoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simplejobscript 8 records HIGH

Records

8 records

TI-2019-15554 CVE-2019-25501 · GHSA-crwm-cgwf-5xw8

Simple Job Script SQL Injection via delete_application_ajax.php

Priority HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00389 Published 2026-03-04 No fix listed CWE-89
TI-2019-15553 CVE-2019-25500 · GHSA-wxh9-p288-x5gx

Simple Job Script SQL Injection via register-recruiters endpoint

Priority HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-03-04 No fix listed CWE-89
TI-2019-15552 CVE-2019-25499 · GHSA-pg86-9pv6-9wq9

Simple Job Script SQL Injection via get_job_applications_ajax.php

Priority HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00516 Published 2026-03-04 No fix listed CWE-89
TI-2019-15551 CVE-2019-25498 · GHSA-qq24-w3jm-9r87

Simple Job Script SQL Injection via searched Endpoint

Priority HIGH 77

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landing_location parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00417 Published 2026-03-04 No fix listed CWE-89
TI-2019-15555 CVE-2019-25502 · GHSA-frc2-f774-gjwf

Simple Job Script Cross-Site Scripting via job_type_value Parameter

Priority MEDIUM 56

Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in the jobs endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00299 Published 2026-03-04 No fix listed CWE-79
Open these records in search →