PHP Scripts Mall Readymade Job Site Script Cross Site Request Forgery Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site request forgery vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A...

PHP Scripts Mall Readymade Job Site Script SQL Injection Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A SQL injection vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote attacker...

CVE-2017-17894

Readymade Job Site Script has CSRF via the /job URI...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17895

CVE-2017-17895 affects Readymade Job Site Script (PHP Scripts Mall). The vulnerability is a SQL Injection via the location_name array parameter to the /job URI, caused by unsanitized input in the application. Documented impact includes high confidentiality, integrity, and availability risks (CVSS...

CVE-2017-17894

CVE-2017-17894 affects the Readymade Job Site Script, with a CSRF flaw exploitable via the /job URI. Public sources (NVD/NVD-derived records) assign a CVSS‑3 base score of 8.8 (HIGH) and CVSS‑2 of 6.8 (MEDIUM), indicating network access required with user interaction typically needed (UI: REQUIRE...

CVE-2017-17896

CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...

CVE-2017-17895

Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...

PT-2017-15079

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue concerns a CSRF problem via the "/job" API endpoint. Recommendations As a temporary workaround, consider restricting access to the "/job" API endpoint until a patc...

PT-2017-15081

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...

PT-2017-15080

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the location name array parameter to the "/job" URI. This allows for potential exploitation. Recommendations At the...

Razer US: SQL Injection on careers.razerzone.com within the Admin interface without any access credentials

The researcher discovered a SQL Injection vulnerability on our careers.razerzone.com host, which is used to list job openings for Razer worldwide and receive application submissions from potential hires. This vulnerability could have allowed the exfiltration of admin credentials as well as person...

Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities

Exploit for multiple platform in category remote exploits 1. Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date...

Trend Micro Smart Protection Server Remote Command Execution Vulnerability

Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A remote command execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to remotely execute arbitrary commands via timed job injection...

Quest NetVault Backup 'NVBUJobDefinitions Get' Method SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability exists in the handling of NVBUJobDefinitions Get method requests in Quest NetVault Backup, which stems from the program failing to properly detect user-submitted strings before using S...

Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

Trend Micro Smart Protection Server Multiple Vulnerabilities 1. Advisory Information Title:: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities...

job-hunt.org XSS vulnerability

Open Bug Bounty ID: OBB-454483 Description| Value ---|--- Affected Website:| job-hunt.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

job-spark.net XSS vulnerability

Open Bug Bounty ID: OBB-453760 Description| Value ---|--- Affected Website:| job-spark.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

email06-job-center.net XSS vulnerability

Open Bug Bounty ID: OBB-453759 Description| Value ---|--- Affected Website:| email06-job-center.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

job-engine.net XSS vulnerability

Open Bug Bounty ID: OBB-453739 Description| Value ---|--- Affected Website:| job-engine.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...