Vulnerabilities (CVE)

Filtered by vendor Preprojects Subscribe
Filtered by product Php Jobwebsite Pro
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-2914 1 Preprojects 1 Php Jobwebsite Pro 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-5977 1 Preprojects 1 Php Jobwebsite Pro 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action.
CVE-2008-5976 1 Preprojects 1 Php Jobwebsite Pro 2023-12-10 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the UserName field.