CVE-2019-25498

CVE-2019-25498 describes an SQL injection in the product “Simple Job Script” that allows unauthenticated attackers to manipulate database queries via the landing_location parameter. The vulnerability can be triggered by POST requests to the searched endpoint, potentially bypassing authentication ...