CVE-2017-17894

Readymade Job Site Script has CSRF via the /job URI...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17896: Improper Neutralization of Input During Web Page Generation

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17894: Cross-Site Request Forgery (CSRF)

Readymade Job Site Script has CSRF via the /job URI...

CVE-2017-17895: Improper Neutralization of Special Elements used in an SQL Command

Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...

CVE-2017-17894

CVE-2017-17894 affects the Readymade Job Site Script, with a CSRF flaw exploitable via the /job URI. Public sources (NVD/NVD-derived records) assign a CVSS‑3 base score of 8.8 (HIGH) and CVSS‑2 of 6.8 (MEDIUM), indicating network access required with user interaction typically needed (UI: REQUIRE...

CVE-2017-17896

CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...

CVE-2017-17895

Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...

PT-2017-15080

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the location name array parameter to the "/job" URI. This allows for potential exploitation. Recommendations At the...

PT-2017-15079

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue concerns a CSRF problem via the "/job" API endpoint. Recommendations As a temporary workaround, consider restricting access to the "/job" API endpoint until a patc...

PT-2017-15081

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...

Readymade Job Site Script 3.0.1 SQL Injection

Title: READYMADE JOB SITE SCRIPT v3.0.1 - Authentication Bypass & SQL injection Credit: Bilal KARDADOU Vendor: http://www.2daybiz.com Vendor URL: http://www.2daybiz.com/content/products/40-readymade-job-site-script.php Product: READYMADE JOB SITE SCRIPT v3.0.1 Google Dork: N/A Product & Service...