Jobberbase
1 CVEs
product
Monthly
In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQLi
PHP
Jobberbase
NVD
Exploit-DB
CVSS 3.1
9.8
EPSS
2.2%
EPSS 2%
CVSS 9.8
CRITICAL
POC
Act Now
In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQLi
PHP
Jobberbase
NVD
Exploit-DB