Description

A remote SQL injection vulnerability exists in Softbiz Jobs and Recruitment Script. Input parameters are not properly sanitized before being used in database queries.

Impact

Attackers can extract sensitive personal data including resumes, contact information, job applications, employer details, and administrative credentials.

Solution

Apply parameterized queries. Contact Softbiz for a security patch.

References