CVE-2024-8469 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...

CVE-2024-8468 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...

CVE-2024-8468

The CVE-2024-8468 entry describes a SQL injection vulnerability in the Job Portal (PHPGurukul Job Portal) where an attacker can send a specially crafted query via the search parameter in /jobportal/index.php to retrieve stored data. Affected component: the search parameter handling in /jobportal/...

CVE-2024-8468 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...

CVE-2024-8467 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...

CVE-2024-8467

CVE-2024-8467 describes a SQL injection in the Job Portal, caused by unsafely handling the id parameter in /jobportal/admin/category/index.php. The vulnerability affects the Job Portal component (as seen in multiple sources) and could lead to unauthorized disclosure of information (confidentialit...

CVE-2024-8467 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...

CVE-2024-8466 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it...

CVE-2024-8466

CVE-2024-8466 describes a SQL injection in PHPGurukul Job Portal (version 1.0) where the CATEGORY parameter in /jobportal/admin/category/controller.php is processed unsafely, enabling an attacker to craft queries to retrieve information stored in the system. The connected documents confirm affect...

CVE-2024-8466 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it...

CVE-2024-8465

CVE-2024-8465 affects the PHPGurukul Job Portal. The vulnerability is an SQL injection in the /jobportal/admin/user/controller.php endpoint, exploitable via the user_id parameter due to improper input handling. A related PoC repo demonstrates authentication bypass and data disclosure, confirming ...

CVE-2024-8465 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...

CVE-2024-8465 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...

CVE-2024-8464

CVE-2024-8464 describes a SQL injection in PHPGurukul Job Portal version 1.0 through the JOBREGID parameter in /jobportal/admin/applicants/controller.php, enabling retrieval of stored data. Affected software is the PHPGurukul Job Portal (v1.0). The root cause is improper input handling leading to...

CVE-2024-8464 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it...

CVE-2024-8464 SQL injection vulnerability in Job Portal

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it...

CVE-2024-8463

CVE-2024-8463 affects PHPGurukul Job Portal 1.0, where an unrestricted file upload vulnerability can be exploited by an authenticated user to achieve remote code execution via a webshell. Public sources (NVD/CNNVD/CVELIST) describe a file upload restriction bypass as the core issue; impact is aut...

CVE-2024-8463 File upload restriction bypass vulnerability in Job Portal

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell...

CVE-2024-8463 File upload restriction bypass vulnerability in Job Portal

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell...

SUSE CVE-2024-44978

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xeexecqueueput Free job depends on job-vm being valid, the last xeexecqueueput can destroy the VM. Prevent UAF by freeing job before xeexecqueueput. cherry picked from commit...