CVE-2024-8465: SQL injection vulnerability in Job Portal
Published Sep 5, 2024
·Updated
SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.
Affected Software
1 affected component
Phpgurukul Job Portal=1.0
Event History
Sep 5, 2024
CVE Published
via MITRE·12:54 PM
Data Sourced
via MITRE·12:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8465?
The severity of CVE-2024-8465 is considered critical due to the potential for SQL injection attacks.
2
How do I fix CVE-2024-8465?
To fix CVE-2024-8465, validate and sanitize all user inputs in the user_id parameter to prevent unauthorized access.
3
What impact does CVE-2024-8465 have on affected systems?
CVE-2024-8465 could allow an attacker to retrieve sensitive information from the database, compromising user data.
4
Which versions of Job Portal are affected by CVE-2024-8465?
CVE-2024-8465 affects PHPGurukul Job Portal version 1.0.
5
Can CVE-2024-8465 be exploited remotely?
Yes, CVE-2024-8465 can be exploited remotely by sending crafted queries through the vulnerable endpoint.