Contact Ameccaz if you need a Proof Of Concept
(dmmjobcontrol) is a TYPO3 extension for showing jobs ("vacancies") on your website. It provides a list- and detail view and the ability to search and apply for jobs. It can even make RSS feeds of your joblist.
1) Unauthenticated Blind SQL Injection dmmjobcontrol provides a search function for the job database. Several input fields (for example education, region, sector) are used without proper sanitization to create the SELECT statement of the search query.