CVE-2024-8464 — SQL Injection in JOB Portal

CWE-89 — SQL Injection3 documents3 sources
Severity
7.5HIGHNVD
CNA9.8
EPSS
0.1%
top 69.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul JOB Portal
Timeline
PublishedSep 5

Description

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5phpgurukul/job_portal1.0

🔴Vulnerability Details

2
GHSA
GHSA-f7xr-hxhp-pp5m: SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/cont↗2024-09-05
▶
CVEList
SQL injection vulnerability in Job Portal↗2024-09-05
▶
CVE-2024-8464 — SQL Injection in Phpgurukul JOB Portal | cvebase