Approved changes feed: RSS · Atom
cpe:2.3:a:joomsky:js_jobs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Joomsky (a5275b6d-cf20-5502-9963-9d826a85d98f) |
|---|---|
| Product | Js Jobs (8332d087-db94-5d16-b352-7bc62e408af5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25740 |
vulnerable | 2026-06-08 05:13:43.043587 |
Joomla com_jsjobs 1.2.6 Arbitrary File Deletion
MEDIUM (6.5)
Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field_2 parameter to delete arbitrary files accessible to the web server.
Published: 2026-06-04T13:22:44.548Z
Updated: 2026-07-15T01:24:13.202Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25327 |
vulnerable | 2026-06-08 05:11:29.796037 |
Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery
MEDIUM (5.3)
Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTML forms targeting administrative endpoints like job.jobenforcedelete to delete job entries or modify component settings when administrators visit attacker-controlled pages.
Published: 2026-05-17T12:11:33.116Z
Updated: 2026-07-15T01:23:35.957Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.