Basic Job Site Script

Vendor:

First CVE: Dec 13, 2017 · Active for 8 years

4
Total CVEs
More Total CVEs than 72% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
8.6
Avg CVSS
Higher Avg CVSS than 77% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Basic Job Site Script over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 13, 2017
8 years ago
Most Recent CVE
Dec 27, 2017
3,131 days ago

CVE Severity & Scoring

Basic Job Site Script4 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (50.0%)
Unknown0 (0.0%)
Required2 (50.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (100.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2017-17642CRITICAL
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.
Dec 13, 20179.843NOYES
CVE-2017-17895CRITICAL
Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
Dec 27, 20179.829NONO
CVE-2017-17894HIGH
Readymade Job Site Script has CSRF via the /job URI.
Dec 27, 20178.826NONO
CVE-2017-17896MEDIUM
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
Dec 27, 20176.120NONO
View all 4 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
25.0% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (4 CVEs).

Media Mentions

Signals from CVEs in this product scope (4 CVEs).

Top CNAs Publishing CVEs For Basic Job Site Script

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.0.519.82.2%01