CVE-2024-8464: SQL injection vulnerability in Job Portal
Published Sep 5, 2024
·Updated
SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.
Affected Software
1 affected component
Phpgurukul Job Portal=1.0
Event History
Sep 5, 2024
CVE Published
via MITRE·12:54 PM
Data Sourced
via MITRE·12:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8464?
CVE-2024-8464 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2024-8464?
To fix CVE-2024-8464, sanitize and validate the JOBREGID parameter input to prevent SQL injection.
3
What systems are affected by CVE-2024-8464?
CVE-2024-8464 affects version 1.0 of the PHPGurukul Job Portal software.
4
Can CVE-2024-8464 lead to data exposure?
Yes, CVE-2024-8464 can allow an attacker to retrieve sensitive information from the database.
5
Is CVE-2024-8464 an easily exploitable vulnerability?
CVE-2024-8464 can be easily exploited by crafting a specially designed SQL query.