Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/03/05 7:30 p.m.•16 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/04 6:31 p.m.•16 views

EUVD-2019-19730

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS6.1AI score0.00241EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/04 6:16 p.m.•30 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/04 5:15 p.m.•14 views

CVE-2019-25504 NCrypted Jobgator Lastest SQL Injection via agents Find-Jobs

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/04 5:15 p.m.•28 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability in the Find-Jobs endpoint. The vulnerability is triggered via the experience parameter, allowing unauthenticated attackers to manipulate database queries and extract sensitive data. An attacker can send crafted POST requests to the agents ...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/04 5:15 p.m.•7 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•16 views

PT-2026-22959

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS6.1AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•4 views

CVE-2019-25504: Improper Neutralization of Special Elements used in an SQL Command

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2023/06/04 4:30 a.m.•4 views

find-jobs-cpns-kabupaten-kubu-raya-l9.burung.us Cross Site Scripting vulnerability OBB-3384011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
CNVD
CNVD
•added 2015/09/23 12:00 a.m.•18 views

SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability

SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...

7.5CVSS8.3AI score0.0218EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2015/09/18 12:00 a.m.•6 views

PT-2015-7488

Name of the Vulnerable Software and Affected Versions SAP NetWeaver J2EE Engine version 7.40 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the BP FIND JOBS WITH PROGRAM function module. Recommendations For SAP...

7.5CVSS0.0218EPSS
SaveExploits1References5
CVE
CVE
•added 2014/09/23 10:00 a.m.•55 views

CVE-2014-6658

CVE-2014-6658 affects the Apploi Job Search – Find Jobs Android app (v4.19). The issue is failure to verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and access sensitive data via crafted certificates. CVSS-derived impact indicates partial confidentiality/integri...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/09/23 12:00 a.m.•2 views

PT-2014-7336

Name of the Vulnerable Software and Affected Versions Apploi Job Search- Find Jobs aka com.apploi version 4.19 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

5.4CVSS0.00271EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/23 12:00 a.m.•7 views

CVE-2014-6658: Undefined Security Weakness

The Apploi Job Search- Find Jobs aka com.apploi application 4.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder