CVE-2024-8167: code-projects Job Portal forget.php sql injection

Published Aug 26, 2024

Updated

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Fabian Job Portal=1.0

Event History

Aug 26, 2024

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-8167?

CVE-2024-8167 is classified as a critical vulnerability.

How do I fix CVE-2024-8167?

To fix CVE-2024-8167, sanitize and validate user inputs in the /forget.php file to prevent SQL injection.

Which application is affected by CVE-2024-8167?

CVE-2024-8167 affects the Job Portal application version 1.0 developed by Fabianros.

What type of vulnerability is CVE-2024-8167?

CVE-2024-8167 is an SQL injection vulnerability that can be exploited remotely.

What is the main exploit path for CVE-2024-8167?

The main exploit path for CVE-2024-8167 involves manipulating the email/mobile argument in the /forget.php file.