CVE-2024-8470: SQL injection vulnerability in Job Portal
Published Sep 5, 2024
·Updated
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.
Affected Software
1 affected component
Phpgurukul Job Portal=1.0
Event History
Sep 5, 2024
CVE Published
via MITRE·12:56 PM
Data Sourced
via MITRE·12:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8470?
CVE-2024-8470 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2024-8470?
To fix CVE-2024-8470, sanitize and validate the CATEGORY parameter inputs in the application.
3
What software is affected by CVE-2024-8470?
CVE-2024-8470 affects PHPGurukul Job Portal version 1.0.
4
Can CVE-2024-8470 lead to data exposure?
Yes, CVE-2024-8470 can allow an attacker to retrieve all information stored in the database.
5
Where is CVE-2024-8470 located in the application?
CVE-2024-8470 is located in /jobportal/admin/vacancy/controller.php.