Vulnerability in Xoops John Mordo Jobs Module
CVE-2007-2370
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings.
EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.
Affected products
- Xoops John_mordo_jobs_module
- N/a — versions n/a
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (mailing-list, x_refsource_VIM)