| Package | Affected versions | Patched versions |
|---|---|---|
| simplejobscript | ≤ 1.66 |
An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is job_id. The function is getJobApplicationsByJobId(). The file is _lib/class.JobApplication.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free