jobberbase records
2 published records for vendor jobberbase.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-16125No exploit | In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.jobberbase · jobberbase · CWE-89 | Critical9.8 | — | 2.1% | Sep 8, 2019 |
40Plan | CVE-2019-20447No exploit | Jobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint.jobberbase · jobberbase · CWE-89 | Critical9.8 | — | 1.9% | Feb 5, 2020 |
- CVE-2019-1612540Plan
In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.
CriticalCVSS 9.8No exploitEPSS 2%jobberbase · jobberbaseSep 8, 2019
- CVE-2019-2044740Plan
Jobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint.
CriticalCVSS 9.8No exploitEPSS 1%jobberbase · jobberbaseFeb 5, 2020