CVE-2019-25501 - Vulnerability Analysis

Overview

Simple Job Script contains an sql injection caused by improper sanitization of the app_id parameter in delete_application_ajax.php, letting attackers manipulate database queries to extract data or modify contents, exploit requires crafted POST requests.

Severity & Score

Impact

Attackers can extract sensitive data, bypass authentication, or modify database contents, potentially compromising the entire database.

Mitigation

Update to the latest version with proper input sanitization or apply patches that fix the SQL injection vulnerability.

References

• https://www.exploit-db.com/exploits/46612
• https://www.vulncheck.com/advisories/simple-job-script-sql-injection-via-delete-application-ajaxphp

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner