CVE-2007-4359
CVE-2007-4359 is a medium-severity vulnerability in Skilmatch Staffing Systems Joblister3 with a CVSS 2.0 base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.8)
- EPSS exploit prediction: 1% (62nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Skilmatch Staffing Systems Joblister3
- Published:
- Last modified:
Description
Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action.
Frequently asked questions
- What is CVE-2007-4359?
- Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action.
- How severe is CVE-2007-4359?
- CVE-2007-4359 has a CVSS 2.0 base score of 6.8, rated medium severity.
- Is CVE-2007-4359 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-4359?
- CVE-2007-4359 affects Skilmatch Staffing Systems Joblister3. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2007-4359?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-4359 published?
- CVE-2007-4359 was published on 2007-08-15 and last updated on 2026-06-16.
References
- http://osvdb.org/36416
- http://secunia.com/advisories/26440
- http://securityreason.com/securityalert/3013
- http://www.securityfocus.com/archive/1/476282/100/0/threaded
- http://www.securityfocus.com/bid/25296
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36052
Affected products (1)
- cpe:2.3:a:skilmatch_staffing_systems:joblister3:*:*:*:*:*:*:*:*