Vulnerability Description
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter. Attackers can send POST requests to get_job_applications_ajax.php with malicious job_id values to bypass authentication, extract sensitive data, or modify database contents.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Simplejobscript | Simplejobscript | <= 1.66 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/46612ExploitVDB Entry
- https://www.vulncheck.com/advisories/simple-job-script-sql-injection-via-get-jobBroken Link
FAQ
What is CVE-2019-25499?
CVE-2019-25499 is a vulnerability with a CVSS score of 8.2 (HIGH). Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter. Attackers can send PO...
How severe is CVE-2019-25499?
CVE-2019-25499 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-25499?
Check the references section above for vendor advisories and patch information. Affected products include: Simplejobscript Simplejobscript.