CVE-2020-8645

CVE-2020-8645 affects Simplejobscript.com SJS (up to v1.66). The issue is an unauthenticated SQL injection in the job applications search function, exploitable via the vulnerable parameter job_id in the function getJobApplicationsByJobId() within the file _lib/class.JobApplication.php . The CVSS ...