admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request.
https://www.exploit-db.com/exploits/8639
https://exchange.xforce.ibmcloud.com/vulnerabilities/50380