basic job site script vulnerabilities and fixes

Recent CVEs affecting basic job site script, with upgrade or downgrade steps. 4 tracked.

Also searched as: basicjobsitescript.

basic job site script has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17642 (score 65/100).

• CVE-2017-17896 MEDIUM 6.1 MITIGATE Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
• CVE-2017-17895 CRITICAL 9.8 MITIGATE Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
• CVE-2017-17894 HIGH 8.8 MITIGATE Readymade Job Site Script has CSRF via the /job URI.
• CVE-2017-17642 CRITICAL 9.8 DOWNGRADE Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

FAQ

How do I fix basic job site script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is basic job site script being exploited right now?

None of the tracked basic job site script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which basic job site script CVE should I patch first?

CVE-2017-17642 currently ranks highest (65/100): Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job..

RSS feed for basic job site script · ← Back to latest CVEs