Lucene search
+L

13 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•7 views

CVE-2026-10260: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /admin/jobs-admins/delete-jobs.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now...

7.5CVSS7.1AI score0.00263EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/26 8:45 a.m.•44 views

CVE-2026-7028

VULNERABILITY: CVE-2026-7028 affects CodeAstro Online Job Portal 1.0. An SQL injection is possible in the All Jobs Page via manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php. Exploitation is remote and publicly released; impact is limited to low confidentiality/integrity/avail...

5.8CVSS5.4AI score0.00311EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/26 12:00 a.m.•13 views

CVE-2026-7028: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5.3AI score0.00311EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•24 views

PT-2026-35209

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00311EPSS
SaveExploits0References6
Mend
Mend
•added 2021/10/15 12:15 p.m.•3 views

CVE-2021-39336

The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to a...

5.5CVSS0.00909EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/15 12:00 a.m.•9 views

CVE-2021-39336: Improper Neutralization of Input During Web Page Generation

The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to a...

5.5CVSS5.7AI score0.00909EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/15 12:00 a.m.•6 views

PT-2021-22542

Name of the Vulnerable Software and Affected Versions: Job Manager WordPress plugin versions up to and including 0.7.25 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file...

5.5CVSS0.00909EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/03/31 12:00 a.m.•8 views

PT-2021-18391

Name of the Vulnerable Software and Affected Versions CourseMS version 2.1 Description The issue allows an attacker with Admin account access to create a Job Title in the Site area, specifically through the name parameter in admin/add jobs.php, and insert a cross-site scripting XSS payload. This...

4.8CVSS0.00806EPSS
SaveExploits1References5
Openbugbounty
Openbugbounty
•added 2015/07/04 11:15 a.m.•13 views

whydowork.com XSS vulnerability

Vulnerable URL: http://www.whydowork.com/jobs.php?q="&sa.x;=49&sa.y;=14 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 198995 Google Pagerank| 4 VIP website status:| No Check whydowork.com SSL connection:| Grade...

6.3AI score
SaveExploits0
Prion
Prion
•added 2014/05/08 10:55 a.m.•35 views

Sql injection

Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to 1 costview2/jobs.php or 2 costview2/printers.php...

7.5CVSS9.2AI score0.01429EPSS
SaveExploits3References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/08 12:00 a.m.•12 views

CVE-2014-2934: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to 1 costview2/jobs.php or 2 costview2/printers.php...

7.5CVSS6.4AI score0.01429EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2014/05/08 12:00 a.m.•9 views

PT-2014-4964

Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the tr parameter to specific API endpoints, such as "costview2/jobs.php" or "costview2/printers.php". Recommendation...

7.5CVSS0.01429EPSS
SaveExploits3References4
htbridge
htbridge
•added 2011/01/20 12:00 a.m.•37 views

Multiple Vulnerabilities in ReOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...

7.6CVSS8.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder