CVE-2019-16125

In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.

• CWE-89

• https://www.exploit-db.com/exploits/47314Exploit, Third Party Advisory, VDB Entry
• https://zerodays.lol/Third Party Advisory, URL Repurposed
• https://www.exploit-db.com/exploits/47314Exploit, Third Party Advisory, VDB Entry
• https://zerodays.lol/Third Party Advisory, URL Repurposed

Published

Sep 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16118Cross site scripting (XSS) in the photo-gallery (10Web Photo…6.1
• CVE-2019-16119SQL injection in the photo-gallery (10Web Photo Gallery) plu…9.8
• CVE-2019-1612A vulnerability in the CLI of Cisco NX-OS Software could all…4.2
• CVE-2019-16120CSV injection in the event-tickets (Event Tickets) plugin be…8.8
• CVE-2019-16123In Kartatopia PilusCart 1.4.1, the parameter filename in the…7.5
• CVE-2019-16124In YouPHPTube 7.4, the file install/checkConfiguration.php h…9.8
• CVE-2019-16126Grav through 1.6.15 allows (Stored) Cross-Site Scripting due…6.1
• CVE-2019-16127Atmel Advanced Software Framework (ASF) 4 has an Integer Ove…9.1
• CVE-2019-16128Microchip CryptoAuthentication Library CryptoAuthLib prior t…6.8
• CVE-2019-16129Microchip CryptoAuthentication Library CryptoAuthLib prior t…6.8
• CVE-2019-1613A vulnerability in the CLI of Cisco NX-OS Software could all…6.7
• CVE-2019-16130YII2-CMS v1.0 has XSS in protected\core\modules\home\models\…6.1