CVE-2020-8440

controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-01-31

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Simplejobscript (Simplejobscript)

References

• https://github.com/niteosoft/simplejobscript/issues/10