CVE-2010-1727

Description

SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the iType parameter. NOTE: some of these details are obtained from third party information.

Affected products

• aspsiteware / jobpost1.0 – 1.0

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/39708
• EXPLOIThttp://packetstormsecurity.org/1004-exploits/jobpost-sql.txt
• MISChttp://www.securityfocus.com/bid/39831
• EXPLOIThttp://www.exploit-db.com/exploits/12461
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/58264