CVE-2008-5976

CVE-2008-5976 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the PHP JOBWEBSITE PRO package, specifically in the file siteadmin/forgot.php. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via two inputs: (1) the adname parameter in a Submit act...

CVE-2008-5977

CVE-2008-5977 affects PHP JOBWEBSITE PRO (siteadmin/forgot.php) where the adname parameter in a Submit action is vulnerable to SQL injection. The underlying issue is an improper handling of user-supplied input, enabling remote attackers to potentially execute arbitrary SQL commands. The vulnerabi...

CVE-2008-2914

The CVE-2008-2914 entry describes an SQL injection vulnerability in PHP JOBWEBSITE PRO, specifically in the search module (jobseekers/JobSearch3.php). The vulnerability allows remote attackers to inject arbitrary SQL commands via the kw or position parameter. Connected sources confirm the affecte...