CVE-2024-8468 — SQL Injection in JOB Portal

CWE-89 — SQL Injection3 documents3 sources
Severity
7.5HIGHNVD
CNA9.8
EPSS
0.1%
top 69.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul JOB Portal
Timeline
PublishedSep 5

Description

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5phpgurukul/job_portal1.0

🔴Vulnerability Details

2
CVEList
SQL injection vulnerability in Job Portal↗2024-09-05
▶
GHSA
GHSA-mm65-4gm3-h22v: SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index↗2024-09-05
▶
CVE-2024-8468 — SQL Injection in Phpgurukul JOB Portal | cvebase