CVE-2007-4359

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-15 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action.

Affected products

Skilmatch Staffing Systems Joblister3: all versions

References

http://osvdb.org/36416
http://secunia.com/advisories/26440
http://securityreason.com/securityalert/3013
http://www.securityfocus.com/archive/1/476282/100/0/threaded
http://www.securityfocus.com/bid/25296
https://exchange.xforce.ibmcloud.com/vulnerabilities/36052
http://osvdb.org/36416
http://secunia.com/advisories/26440
http://securityreason.com/securityalert/3013
http://www.securityfocus.com/archive/1/476282/100/0/threaded
http://www.securityfocus.com/bid/25296
https://exchange.xforce.ibmcloud.com/vulnerabilities/36052

Get alerted when CVE-2007-4359 or the next vulnerability affects your stack