CVE-2024-8473mediumCWE-79

CVE-2024-8473: falha de média gravidade em PHPGurukul Job Portal

SQL injection vulnerability in Job Portal

Publicada em

Seguir esta CVE+ Monitorar Job Portal

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.3%
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through user_email parameter in /jobportal/admin/login.php.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
PHPGurukul · Job Portal
CVEs relacionadas — PHPGurukul Job Portal

No mesmo produto, das mais perigosas para as menos.

CVE-2024-8463CRITICALFile upload restriction bypass vulnerability in Job PortalEPSS 0.5%CVE-2024-8470CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8469CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8468CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8467CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%CVE-2024-8466CRITICALSQL injection vulnerability in Job PortalEPSS 0.5%