📄 الوصف (الإنجليزية)
Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET parameter. Attackers can send crafted requests to news_details.php, jobs_details.php, or job_cmp_details.php with malicious 'id' values using GROUP BY and CASE statements to extract sensitive database information.
🤖 ملخص AI
CVE-2019-25636 is a critical SQL injection vulnerability in Zeeways Jobsite CMS affecting multiple detail pages (news, jobs, comparisons). Unauthenticated attackers can exploit the unvalidated 'id' parameter to extract sensitive database information including user credentials, job postings, and organizational data. With no patch available and no exploit currently public, organizations using this CMS face significant risk of data breach and unauthorized access.
📄 الوصف (العربية)
🤖 التحليل الذكي آخر تحليل: Apr 25, 2026 11:34
🇸🇦 التأثير على المملكة العربية السعودية
Saudi organizations using Zeeways Jobsite CMS for recruitment portals, HR management, or job listing platforms face critical risk. Most vulnerable sectors include: (1) Government agencies and ministries using CMS for job postings and recruitment; (2) Large Saudi corporations (ARAMCO, STC, banking sector) with internal job portals; (3) Recruitment agencies and HR service providers operating in Saudi Arabia; (4) Educational institutions managing student placement systems. Potential impact includes exposure of employee personal data, job applicant information (including sensitive background checks), organizational structure details, and internal communications stored in the database.
🏢 القطاعات السعودية المتأثرة
Government and Public Administration
Banking and Financial Services
Recruitment and HR Services
Education and Universities
Telecommunications
Energy and Utilities
Healthcare Organizations
🎯 تقنيات MITRE ATT&CK
⚖️ درجة المخاطر السعودية (AI)
8.5
/ 10.0
🔧 Remediation Steps (English)
IMMEDIATE ACTIONS:
1. Identify all instances of Zeeways Jobsite CMS in your environment and isolate affected systems from production networks if possible
2. Implement Web Application Firewall (WAF) rules to block SQL injection patterns in the 'id' parameter (block requests containing: UNION, SELECT, GROUP BY, CASE, CAST, CONVERT, etc.)
3. Enable database query logging and monitor for suspicious SQL patterns
4. Conduct emergency database audit to identify if exploitation has occurred
PATCHING GUIDANCE:
5. Contact Zeeways vendor immediately for security patch availability or timeline
6. If no patch is forthcoming, plan immediate migration to alternative CMS solutions (WordPress with security plugins, Joomla, Drupal)
7. Implement input validation: whitelist numeric-only values for 'id' parameter, reject any non-numeric input
8. Apply parameterized queries/prepared statements to all database interactions
COMPENSATING CONTROLS:
9. Implement IP whitelisting for access to affected pages
10. Require multi-factor authentication for administrative access
11. Encrypt sensitive database fields (passwords, personal data)
12. Implement database activity monitoring (DAM) solutions
DETECTION RULES:
- Alert on GET requests to news_details.php, jobs_details.php, job_cmp_details.php containing SQL keywords in 'id' parameter
- Monitor for unusual database query patterns or multiple failed queries
- Track database connections from web application user accounts
🔧 خطوات المعالجة (العربية)
الإجراءات الفورية:
1. حدد جميع نسخ Zeeways Jobsite CMS في بيئتك وعزل الأنظمة المتأثرة عن شبكات الإنتاج إن أمكن
2. طبق قواعد جدار حماية تطبيقات الويب (WAF) لحجب أنماط حقن SQL في معامل 'id'
3. فعّل تسجيل استعلامات قاعدة البيانات ومراقبة الأنماط المريبة
4. أجرِ تدقيق قاعدة بيانات طارئ للتحقق من الاستغلال
إرشادات التصحيح:
5. اتصل بمورد Zeeways فوراً للحصول على تصحيح أمني أو جدول زمني
6. إذا لم يتوفر تصحيح، خطط للهجرة الفورية إلى حلول CMS بديلة
7. طبق التحقق من المدخلات: قبول القيم الرقمية فقط لمعامل 'id'
8. طبق الاستعلامات المعاملة/البيانات المحضرة على جميع تفاعلات قاعدة البيانات
الضوابط التعويضية:
9. طبق قائمة بيضاء للعناوين IP للوصول إلى الصفحات المتأثرة
10. اطلب المصادقة متعددة العوامل للوصول الإداري
11. شفّر الحقول الحساسة في قاعدة البيانات
12. طبق حلول مراقبة نشاط قاعدة البيانات
📋 خريطة الامتثال التنظيمي
🟢 NCA ECC 2024
A.14.2.1 - Secure development policy and procedures
A.14.2.5 - Secure development environment
A.14.3.1 - Testing of security functionality
A.12.6.1 - Management of technical vulnerabilities
A.12.2.1 - Monitoring of system use
🔵 SAMA CSF
ID.GV-1 - Organizational cybersecurity policy and governance
PR.DS-6 - Integrity checking mechanisms
PR.IP-1 - System development and acquisition processes
DE.CM-1 - The network is monitored to detect potential cybersecurity events
RS.MI-1 - Incidents are contained
🟡 ISO 27001:2022
A.14.2.1 - Secure development policy
A.14.2.5 - Secure development environment
A.14.3.1 - Security testing
A.12.6.1 - Management of technical vulnerabilities
A.13.1.3 - Segregation of networks
🟣 PCI DSS v4.0.1
6.5.1 - Injection flaws prevention
6.2 - Security patches and updates
11.2 - Vulnerability scanning