1 matches found
CVE-2019-25499: Improper Neutralization of Special Elements used in an SQL Command
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jobid parameter. Attackers can send POST requests to getjobapplicationsajax.php with malicious jobid values to bypass authentication,...
9.8CVSS6AI score0.00472EPSS
SaveExploits1References1
20