| Package | Affected versions | Patched versions |
|---|---|---|
| john mordo jobs module | ≤ 2.4 |
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free