Readymade Job Site Script has CSRF via the /job URI.
Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI.
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to viewcurrentjob.php, (2) jobiid parameter to showsearchmore.php, and (3) leftcat parameter to showsearchresult.php.