Job Portal (Phpgurukul) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-09-05. Vendor: Phpgurukul.
CVEs of Job Portal
- CVE-2024-8472 - CVSS 6.3 (medium), 2024-09-05: Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an…
- CVE-2024-8473 - CVSS 6.3 (medium), 2024-09-05: Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an…
- CVE-2024-8469 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and…
- CVE-2024-8471 - CVSS 6.3 (medium), 2024-09-05: Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an…
- CVE-2024-8470 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php,…
- CVE-2024-8466 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in…
- CVE-2024-8465 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and…
- CVE-2024-8468 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the…
- CVE-2024-8467 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and…
- CVE-2024-8463 - CVSS 9.9 (critical), 2024-09-05: File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via…
- CVE-2024-8464 - CVSS 9.8 (critical), 2024-09-05: SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in…
- CVE-2020-10225 - CVSS 9.8 (critical), 2020-03-08: An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an…
