CVE-2024-8470

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve-coordination@incibe.es

Published

2024-09-05

Last modified

2024-09-05

Weaknesses

CWE-89

Affected products

• Job Portal (Phpgurukul)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-job-portal