basic job site script project vulnerabilities

Recent CVEs affecting basic job site script project products. 4 tracked.

basic job site script project has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17642 (score 65/100).

• CVE-2017-17896 MEDIUM 6.1 MITIGATE Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
• CVE-2017-17895 CRITICAL 9.8 MITIGATE Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
• CVE-2017-17894 HIGH 8.8 MITIGATE Readymade Job Site Script has CSRF via the /job URI.
• CVE-2017-17642 CRITICAL 9.8 DOWNGRADE Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.

FAQ

How do I fix basic job site script project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is basic job site script project being exploited right now?

None of the tracked basic job site script project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which basic job site script project CVE should I patch first?

CVE-2017-17642 currently ranks highest (65/100): Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job..

Products

• basic job site script

RSS feed for basic job site script project · ← Back to latest CVEs