CVE-2024-8471

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php...

CVE-2024-8470

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it...

CVE-2024-8463

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell...

CVE-2024-8463

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell...

CVE-2024-8473 SQL injection vulnerability in Job Portal

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

CVE-2024-8473

CVE-2024-8473 concerns a cross-site scripting (XSS) flaw in the Job Portal web application (PHP-based). The affected component is the login flow, specifically the user_email input parameter in /jobportal/admin/login.php, where user-controlled input is not adequately handled, enabling XSS. The doc...

CVE-2024-8473 SQL injection vulnerability in Job Portal

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

CVE-2024-8472 SQL injection vulnerability in Job Portal

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through multiple parameters in /jobportal/index.php...

CVE-2024-8472

CVE-2024-8472 is described as a Cross-Site Scripting (XSS) vulnerability in the Job Portal (notably PHPGurukul/Job Portal) where user-controlled input in multiple parameters of /jobportal/index.php can expose session details of an authenticated user. Connected sources corroborate XSS affecting Jo...

CVE-2024-8472 SQL injection vulnerability in Job Portal

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through multiple parameters in /jobportal/index.php...

CVE-2024-8471 SQL injection vulnerability in Job Portal

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php...

CVE-2024-8471

CVE-2024-8471 concerns a Cross-Site Scripting (XSS) vulnerability in a Job Portal web application. The vulnerability arises from insufficient handling/encryption of user-controlled input in the /jobportal/process.php endpoint, with JOBID and USERNAME parameters being implicated. Exploitation coul...

CVE-2024-8471 SQL injection vulnerability in Job Portal

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php...

CVE-2024-8470 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it...

CVE-2024-8470 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it...

CVE-2024-8470

CVE-2024-8470 is a SQL injection vulnerability in the Job Portal web application (noted in multiple sources as the PHPGurukul Job Portal). The issue arises when an attacker can inject via the CATEGORY parameter in the endpoint /jobportal/admin/vacancy/controller.php, allowing retrieval of all sto...

CVE-2024-8469 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...

CVE-2024-8469

CVE-2024-8469 is a SQL injection vulnerability in the Job Portal (e.g., PHPGurukul Job Portal) where an attacker can manipulate the id parameter in /jobportal/admin/employee/index.php to retrieve data. It’s documented across multiple sources (NVD, CVE List, vuln enrichment) with high to critical ...

CVE-2024-8469 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...

CVE-2024-8468 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...