CVE-2020-8645 - An issue was discovered in Simplejobscript.com SJS through 1.66

Back Back to CVE browser

CRITICAL

An issue was discovered in Simplejobscript.com SJS through 1.66

Published Feb 6, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.76%

Description

An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is job_id. The function is getJobApplicationsByJobId(). The file is _lib/class.JobApplication.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29493
Advisory
https://github.com/niteosoft/simplejobscript/issues/9
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29493		Advisory
https://github.com/niteosoft/simplejobscript/issues/9		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 6, 2020

Updated Aug 4, 2024

Reserved Feb 5, 2020

Link CVE-2020-8645

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8645

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 6, 2020

Updated Aug 4, 2024

Link EUVD-2020-29493

GitHub

No data