Jobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint.Referenceshttps://www.exploit-db.com/exploits/47311https://packetstormsecurity.com/files/152503/Jobberbase-CMS-2.0-SQL-Injection.html