Which versions of NCrypted Jobgator are affected by CVE-2019-25504?

NCrypted Jobgator contains a critical SQL injection vulnerability (CVE-2019-25504) that allows attackers to bypass authentication and manipulate your database without credentials.

Is there a public PoC exploit available for CVE-2019-25504?

Yes, a public proof-of-concept exploit is available for CVE-2019-25504. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2019-25504?

Within 24 hours: Identify all instances of NCrypted Jobgator in your environment and assess whether they are internet-facing or contain sensitive data. Within 7 days: Implement network segmentation to restrict access and deploy WAF rules to block SQL injection patterns in the experience parameter; notify the vendor and evaluate alternative solutions. Within 30 days: Develop a remediation plan including software replacement or retirement, conduct forensic analysis for signs of exploitation, and establish a timeline for complete decommissioning.

NCrypted Jobgator CVE-2019-25504

Q: What is the CVSS score of CVE-2019-25504?

CVE-2019-25504 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

HIGH

SQL Injection (CWE-89)

2026-03-04 disclosure@vulncheck.com

SQLi

8.8

CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 15, 2026 - 15:22 NVD

8.2 (HIGH) 8.8 (HIGH)

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

PoC Detected

Mar 05, 2026 - 19:39 vuln.today

Public exploit code

CVE Published

Mar 04, 2026 - 18:16 nvd

HIGH 8.2

DescriptionNVD

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract sensitive database information.

AnalysisAI

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. [CVSS 8.2 HIGH]

Technical ContextAI

Classified as CWE-89 (SQL Injection). NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract sensitive database information.

Affected ProductsAI

Component: experience.

RemediationAI

Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation. Restrict network access to the affected service where possible.

CVE-2019-25504 vulnerability details – vuln.today

Back

NCrypted Jobgator CVE-2019-25504

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

NCrypted Jobgator CVE-2019-25504

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

External POC / Exploit Code