Sql injection

2023-12-2200:15:00

PRIOn knowledge base

www.prio-n.com

job portal vulnerability

unauthenticated sql injection

txtuser parameter

database vulnerability

nvd

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.1%

JSON

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ‘txtUser’ parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.

CPENameOperatorVersion
job_portaleq1.0

CPE	Name	Operator	Version
	job_portal	eq	1.0

References

fluidattacks.com/advisories/pollini/

www.kashipara.com/