17 matches found
EUVD-2017-6246
Malware in sbrugna...
EUVD-2017-18534
Malware in sbrugna...
WordPress WP Jobs Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP Jobs plugin is one of the post management plugin. A cross-site scripting vulnerability exists in version 1.5 of...
CVE-2017-14751
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...
CVE-2017-14751
The CVE-2017-14751 entry relates to the WordPress WP Jobs plugin version 1.5, where the Job Qualification field is vulnerable to cross‑site scripting (XSS). Public sources describe this as a XSS vulnerability in the WP Jobs plugin, with at least one entry indicating a remote attacker can exploit ...
CVE-2017-14751
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...
CVE-2017-14751: Improper Neutralization of Input During Web Page Generation
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...
WP Jobs < 1.7 - XSS
The WP Jobs WordPress plugin was affected by a XSS security vulnerability...
PT-2017-13666
Name of the Vulnerable Software and Affected Versions Intense WP "WP Jobs" plugin version 1.5 Description The issue is related to a XSS concern, specifically tied to the Job Qualification field. Recommendations For version 1.5, consider disabling the Job Qualification field until a patch is...
WordPress WP Jobs Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP Jobs plugin is one of the post management plugin. A SQL injection vulnerability exists in WordPress WP Jobs plug...
CVE-2017-9603
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...
Sql injection
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...
CVE-2017-9603
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...
CVE-2017-9603
Summary: CVE-2017-9603 is a SQL injection vulnerability in the WP Jobs WordPress plugin (versions before 1.5). The issue allows authenticated users to execute arbitrary SQL commands via the jobid parameter in wp-admin/edit.php. The PoC demonstrates crafting a UNION-based payload (e.g., jobid=5 UN...
CVE-2017-9603: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...
PT-2017-19063
Name of the Vulnerable Software and Affected Versions WP Jobs plugin version 1.4 and earlier Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the jobid parameter in the /wp-admin/edit.php endpoint. Recommendations For WP Jobs plugi...