Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the (1) position or (2) kw parameter.
References
Configurations
History
No history.
Information
Published : 2008-06-30 18:24
Updated : 2024-02-04 17:33
NVD link : CVE-2008-2915
Mitre link : CVE-2008-2915
CVE.ORG link : CVE-2008-2915
JSON object : View
Products Affected
preprojects
- pre_job_board
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')