vendor:
Jobprofile
by:
kaMtiEz
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Jobprofile
Affected Version From: null
Affected Version To: 1
Patch Exists: Yes
Related CWE: N/A
CPE: a:thakkertech:jobprofile
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2011
Joomla Component Jobprofile (com_jobprofile) SQL Injection Vulnerability
A SQL Injection vulnerability was discovered in Joomla Component Jobprofile (com_jobprofile). An attacker can exploit this vulnerability to gain access to sensitive information from the database. The vulnerable parameter is ‘id’ which is not properly sanitized before being used in an SQL query. An attacker can inject arbitrary SQL code into the ‘id’ parameter to gain access to sensitive information from the database.
Mitigation:
The vendor has released a patch to address this vulnerability. It is recommended to upgrade to the latest version of the software.
