1 matches found
CVE-2019-25636: Improper Neutralization of Special Elements used in an SQL Command
Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET parameter. Attackers can send crafted requests to newsdetails.php, jobsdetails.php, or jobcmpdetails.php with malicious 'id'...
8.8CVSS5.9AI score0.00327EPSS
SaveExploits1References1
20