In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.

Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre