3 matches found
CVE-2017-17896
CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...
CVE-2017-17894
CVE-2017-17894 affects the Readymade Job Site Script, with a CSRF flaw exploitable via the /job URI. Public sources (NVD/NVD-derived records) assign a CVSS‑3 base score of 8.8 (HIGH) and CVSS‑2 of 6.8 (MEDIUM), indicating network access required with user interaction typically needed (UI: REQUIRE...
CVE-2017-17895
CVE-2017-17895 affects Readymade Job Site Script (PHP Scripts Mall). The vulnerability is a SQL Injection via the location_name array parameter to the /job URI, caused by unsanitized input in the application. Documented impact includes high confidentiality, integrity, and availability risks (CVSS...