CVE-2019-25498

CVE-2019-25498 describes an SQL injection in the product “Simple Job Script” that allows unauthenticated attackers to manipulate database queries via the landing_location parameter. The vulnerability can be triggered by POST requests to the searched endpoint, potentially bypassing authentication ...

CVE-2019-25498 Simple Job Script SQL Injection via searched Endpoint

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landinglocation parameter. Attackers can send POST requests to the searched endpoint with malicious SQL payloads to bypass authenticatio...