CVE-2008-2914 SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position paramete...
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| preprojects php jobwebsite pro | All versions | No fix listed |
References
- 30686 third-party-advisory vendor-advisory
- 20080615 PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability mailing-list
- 29713 exploit vdb-entry
- phpjobwebsitepro-jobsearch3-sql-injection(43092) vdb-entry
- 5807 exploit