9932 matches found
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17613
Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...
CVE-2017-17596
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearchall.php rid1 parameter...
CVE-2017-17596
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearchall.php rid1 parameter...
CVE-2017-17574
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter...
Sql injection
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearchall.php rid1 parameter...
Sql injection
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17596
Entrepreneur Job Portal Script 2.0.6 contains a SQL Injection (CVE-2017-17596) in the jobsearch_all.php rid1 parameter. This affects the PHP Scripts Mall Entrepreneur Job Portal Script and enables remote injection of SQL commands via the rid1 input. Public exploits exist (e.g., Exploit-DB, Packet...
CVE-2017-17642
CVE-2017-17642 affects Basic Job Site Script 2.0.5, with a SQL injection vulnerability in the keyword parameter to /job. The issue is described as enabling SQL command injection by a remote attacker, potentially impacting confidentiality, integrity, and availability. NVD metrics list CVSSv3 base ...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17642: Improper Neutralization of Special Elements used in an SQL Command
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17596: Improper Neutralization of Special Elements used in an SQL Command
Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearchall.php rid1 parameter...
PT-2017-14938
Name of the Vulnerable Software and Affected Versions Basic Job Site Script version 2.0.5 Description The issue concerns a SQL Injection flaw. It can be exploited via the keyword parameter to the "/job" API endpoint. Recommendations For Basic Job Site Script version 2.0.5, consider restricting...
PT-2017-14891
Name of the Vulnerable Software and Affected Versions Entrepreneur Job Portal Script version 2.0.6 Description The issue is related to SQL Injection, which occurs via the rid1 parameter in the "jobsearch all.php" endpoint. This allows for potential exploitation. Recommendations For Entrepreneur J...
CVE-2017-17383
Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...
Palo Alto Networks readSessionVarsFromFile() Session Corruption
This module exploits a chain of vulnerabilities in Palo Alto Networks products running PAN-OS versions prior to 6.1.19, 7.0.19, 7.1.14, and 8.0.6. This chain starts by using an authentication bypass flaw to to exploit an XML injection issue, which is then abused to create an arbitrary directory,...
Entrepreneur Job Portal Script 2.0.6 - jobsearch_all.php?rid1 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Entrepreneur Job Portal Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/entrepreneur-job-portal-script/ Demo:...
InSpy - A Linkedin Enumeration Tool
InSpy is a python based LinkedIn enumeration tool. Inspy has two functionalities: TechSpy and EmpSpy. TechSpy - Crawls LinkedIn job listings for technlogoies used by the provided company. InSpy attempts to identify technologies by matching job descriptions to keywords from a new line delimited...