Lucene search
HistorySep 05, 2024 - 1:15 p.m.
CVE-2024-8465
cve-2024-8465
sql injection
user_id parameter
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.
Affected configurations
Node
phpgurukuljob_portalMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpgurukul | job_portal | 1.0 | cpe:2.3:a:phpgurukul:job_portal:1.0:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-8465 SQL injection vulnerability in Job Portal
2024-09-05 12:54:34
cve
cve
CVE-2024-8465
2024-09-05 13:15:13
cvelist
cvelist
CVE-2024-8465 SQL injection vulnerability in Job Portal
2024-09-05 12:54:34
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
Related for NVD:CVE-2024-8465