CVE-2020-8645

CVE-2020-8645 affects Simplejobscript.com SJS (up to v1.66). The issue is an unauthenticated SQL injection in the job applications search function, exploitable via the vulnerable parameter job_id in the function getJobApplicationsByJobId() within the file _lib/class.JobApplication.php . The CVSS ...

PT-2020-20251

Name of the Vulnerable Software and Affected Versions Simplejobscript.com SJS versions 1.66 and earlier Description An issue was discovered in the job applications search function, allowing for unauthenticated SQL injection. The job id parameter is vulnerable, and the issue is related to the...

CVE-2020-8645: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is jobid. The function is getJobApplicationsByJobId. The file is lib/class.JobApplication.php...

CVE-2020-8440

controllers/pageapply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume...

PT-2020-20140

Name of the Vulnerable Software and Affected Versions Simplejobscript.com SJS versions 1.66 and earlier Description The issue allows for unauthenticated Remote Code Execution by uploading a PHP script as a resume, specifically affecting the controllers/page apply.php file. Recommendations For...

CVE-2020-8440: Unrestricted Upload of File with Dangerous Type

controllers/pageapply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume...

CVE-2020-7229: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter is landinglocation. The function is countSearchedJobs. The file is lib/class.Job.php...