All verified exploits

CVE-2019-25499 Unauthenticated SQL Injection

Deterministic critical SimpleJobScript Added cve-verified-cve-2019-25499

Detects time-based blind SQL injection in SimpleJobScript's job applications endpoint. The job_id POST parameter is concatenated directly into SQL without sanitization, allowing unauthenticated database access.

Is your app exploitable through CVE-2019-25499?

Scan your domain free