CVE-2009-4599 Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_c...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_company action to index.php or (2) the oi parameter in an employer view_job action to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomshark com jsjobs | = 1.0.5.6 | No fix listed |
References
- packetstormsecurity.org exploit
- 10366 exploit
- 37281 vdb-entry
- jsjobs-index-sql-injection(54663) vdb-entry