CVE-2024-8466: SQL injection vulnerability in Job Portal
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8466?
CVE-2024-8466 has a high severity due to its potential to allow unauthorized access to sensitive information through SQL injection.
How do I fix CVE-2024-8466?
To fix CVE-2024-8466, validate and sanitize all user inputs, especially the CATEGORY parameter in /jobportal/admin/category/controller.php.
What systems are affected by CVE-2024-8466?
CVE-2024-8466 affects PHPGurukul Job Portal version 1.0.
What kind of vulnerability is CVE-2024-8466?
CVE-2024-8466 is an SQL injection vulnerability that allows attackers to manipulate database queries.
How can an attacker exploit CVE-2024-8466?
An attacker can exploit CVE-2024-8466 by sending a specially crafted SQL query through the CATEGORY parameter to retrieve sensitive data.