CVE-2017-17895

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Readymade Job Site Script is vulnerable to SQL Injection via the location_name array parameter in the /job URI.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries on the database, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to validate and sanitize input data and to update the script to the latest version to mitigate the risk of SQL Injection.

Original NVD description (English source)

Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.