EUVD-2017-8800

Malware in sbrugna...

EUVD-2017-9041

Malware in sbrugna...

EUVD-2017-9042

Malware in sbrugna...

CVE-2017-17895

Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17894

Readymade Job Site Script has CSRF via the /job URI...

Cross site request forgery (csrf)

Readymade Job Site Script has CSRF via the /job URI...

Default credentials

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17894: Cross-Site Request Forgery (CSRF)

Readymade Job Site Script has CSRF via the /job URI...

CVE-2017-17895: Improper Neutralization of Special Elements used in an SQL Command

Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...

CVE-2017-17896: Improper Neutralization of Input During Web Page Generation

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...

PHP Scripts Mall Readymade Job Site Script Cross Site Request Forgery Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site request forgery vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A...

CVE-2017-17894

CVE-2017-17894 affects the Readymade Job Site Script, with a CSRF flaw exploitable via the /job URI. Public sources (NVD/NVD-derived records) assign a CVSS‑3 base score of 8.8 (HIGH) and CVSS‑2 of 6.8 (MEDIUM), indicating network access required with user interaction typically needed (UI: REQUIRE...

CVE-2017-17896

CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...

CVE-2017-17895

Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...

PT-2017-15079

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue concerns a CSRF problem via the "/job" API endpoint. Recommendations As a temporary workaround, consider restricting access to the "/job" API endpoint until a patc...

PT-2017-15080

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to SQL Injection, which occurs via the location name array parameter to the "/job" URI. This allows for potential exploitation. Recommendations At the...

PT-2017-15081

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...

PHP Scripts Mall Basic Job Site Script SQL Injection Vulnerability

PHP Scripts Mall Basic Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features such as job management, profile management and email notification. A SQL injection vulnerability exists in PHP Scripts Mall Basic Job Site Script version 2.0.5. A remote...