CVE-2024-8470: falha crítica em PHPGurukul Job Portal
SQL injection vulnerability in Job Portal
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.5%
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
PHPGurukul · Job PortalCVEs relacionadas — PHPGurukul Job Portal
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8463CRITICALFile upload restriction bypass vulnerability in Job PortalEPSS 0.5%CVE-2024-8469CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8468CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8467CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8466CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8465CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%