CVE-2025-8921: code-projects Job Diary user-apply.php sql injection
A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8921?
CVE-2025-8921 has a high severity rating due to the potential for SQL injection vulnerabilities that can be exploited remotely.
How do I fix CVE-2025-8921?
To fix CVE-2025-8921, validate and sanitize the inputs for the job_title parameter in the /user-apply.php file to prevent SQL injection.
What software is affected by CVE-2025-8921?
CVE-2025-8921 affects version 1.0 of the Code-projects Job Diary software.
What type of vulnerability is CVE-2025-8921?
CVE-2025-8921 is a SQL injection vulnerability that allows attackers to manipulate database queries.
Can CVE-2025-8921 be exploited remotely?
Yes, CVE-2025-8921 can be exploited remotely, making the vulnerability particularly critical.