simplejobscript records
8 published records for vendor simplejobscript.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-8440No exploit | controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP scrisimplejobscript · simplejobscript · CWE-434 | Critical9.8 | — | 2.8% | Jan 31, 2020 |
40Plan | CVE-2020-8645No exploit | An issue was discovered in Simplejobscript.com SJS through 1.66.simplejobscript · simplejobscript · CWE-89 | Critical9.8 | — | 1.8% | Feb 6, 2020 |
39Monitor | CVE-2020-7229No exploit | An issue was discovered in Simplejobscript.com SJS before 1.65.simplejobscript · simplejobscript · CWE-89 | Critical9.8 | — | 1.5% | Jan 21, 2020 |
35Monitor | CVE-2019-25499No exploit | Simple Job Script SQL Injection via get_job_applications_ajax.phpsimplejobscript · simplejobscript · CWE-89 | High8.8 | — | 0.5% | Mar 4, 2026 |
35Monitor | CVE-2019-25498No exploit | Simple Job Script SQL Injection via searched Endpointsimplejobscript · simplejobscript · CWE-89 | High8.8 | — | 0.4% | Mar 4, 2026 |
35Monitor | CVE-2019-25501No exploit | Simple Job Script SQL Injection via delete_application_ajax.phpsimplejobscript · simplejobscript · CWE-89 | High8.8 | — | 0.3% | Mar 4, 2026 |
35Monitor | CVE-2019-25500No exploit | Simple Job Script SQL Injection via register-recruiters endpointsimplejobscript · simplejobscript · CWE-89 | High8.8 | — | 0.3% | Mar 4, 2026 |
20Monitor | CVE-2019-25502No exploit | Simple Job Script Cross-Site Scripting via job_type_value Parametersimplejobscript · simplejobscript · CWE-79 | Medium5.1 | — | 0.3% | Mar 4, 2026 |
- CVE-2020-844040Plan
controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP scri
CriticalCVSS 9.8No exploitEPSS 3%simplejobscript · simplejobscriptJan 31, 2020
- CVE-2020-864540Plan
An issue was discovered in Simplejobscript.com SJS through 1.66.
CriticalCVSS 9.8No exploitEPSS 2%simplejobscript · simplejobscriptFeb 6, 2020
- CVE-2020-722939Monitor
An issue was discovered in Simplejobscript.com SJS before 1.65.
CriticalCVSS 9.8No exploitEPSS 1%simplejobscript · simplejobscriptJan 21, 2020
- CVE-2019-2549935Monitor
Simple Job Script SQL Injection via get_job_applications_ajax.php
HighCVSS 8.8No exploitEPSS 0%simplejobscript · simplejobscriptMar 4, 2026
- CVE-2019-2549835Monitor
Simple Job Script SQL Injection via searched Endpoint
HighCVSS 8.8No exploitEPSS 0%simplejobscript · simplejobscriptMar 4, 2026
- CVE-2019-2550135Monitor
Simple Job Script SQL Injection via delete_application_ajax.php
HighCVSS 8.8No exploitEPSS 0%simplejobscript · simplejobscriptMar 4, 2026
- CVE-2019-2550035Monitor
Simple Job Script SQL Injection via register-recruiters endpoint
HighCVSS 8.8No exploitEPSS 0%simplejobscript · simplejobscriptMar 4, 2026
- CVE-2019-2550220Monitor
Simple Job Script Cross-Site Scripting via job_type_value Parameter
MediumCVSS 5.1No exploitEPSS 0%simplejobscript · simplejobscriptMar 4, 2026