CVE-2007-4359

2007-08-1519:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.008

Percentile

82.0%

JSON

Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action.

References

osvdb.org/36416

secunia.com/advisories/26440

securityreason.com/securityalert/3013

www.securityfocus.com/archive/1/476282/100/0/threaded

www.securityfocus.com/bid/25296

exchange.xforce.ibmcloud.com/vulnerabilities/36052