CVE-2024-11077: code-projects Job Recruitment index.php sql injection
Published Nov 11, 2024
·Updated
A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Anisha Job Recruitment=1.0
Event History
Nov 11, 2024
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-11077?
CVE-2024-11077 is classified as a critical vulnerability.
2
How does CVE-2024-11077 affect job recruitment software?
CVE-2024-11077 allows SQL injection attacks through the manipulation of the email argument in the index.php file.
3
Is remote exploitation possible with CVE-2024-11077?
Yes, CVE-2024-11077 can be exploited remotely.
4
What version of Job Recruitment is affected by CVE-2024-11077?
CVE-2024-11077 affects version 1.0 of Anisha Job Recruitment.
5
How can I fix the vulnerability identified by CVE-2024-11077?
To fix CVE-2024-11077, sanitize input fields in the application to prevent SQL injection.