CVE Catalog

CVE-2017-17596

Critical
Published: Translated: NVD NIST

Summary

Entrepreneur Job Portal Script version 2.0.6 has an SQL Injection vulnerability via the rid1 parameter in the jobsearch_all.php file.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing user data confidentiality and system integrity.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS