9795 matches found
CVE-2024-8467
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-8465
SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...
CVE-2024-8469
CVE-2024-8469 is a SQL injection vulnerability in the Job Portal (e.g., PHPGurukul Job Portal) where an attacker can manipulate the id parameter in /jobportal/admin/employee/index.php to retrieve data. It’s documented across multiple sources (NVD, CVE List, vuln enrichment) with high to critical ...
CVE-2024-8467 SQL injection vulnerability in Job Portal
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-8467
CVE-2024-8467 describes a SQL injection in the Job Portal, caused by unsafely handling the id parameter in /jobportal/admin/category/index.php. The vulnerability affects the Job Portal component (as seen in multiple sources) and could lead to unauthorized disclosure of information (confidentialit...
CVE-2024-8467 SQL injection vulnerability in Job Portal
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-42885
The ESAFENET CDG document security management system (versions 5.6 and earlier ) contains a SQL Injection vulnerability. An attacker can exploit the id parameter of the data.jsp page to execute arbitrary code . To mitigate this risk, users are advised to disable access to the data.jsp page or res...
CVE-2024-8469: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...
PT-2024-39034 · Unknown · Job Portal
Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: The issue is related to a SQL injection vulnerability. An attacker could send a specially designed query through the id parameter in the "/jobportal/admin/category/index.php"...
CVE-2024-42885: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...
PHPGurukul Job Portal SQL Injection Vulnerability
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the id parameter in /jobportal/admin/employee/index.php...
PHPGurukul Job Portal SQL Injection Vulnerability
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the userid parameter in /jobportal/admin/user/controller.php...
CVE-2024-8467: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-44817
SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component...
CVE-2024-44817
The content management system ZZCMS (version v.2023 and before ) is vulnerable to a SQL Injection vulnerability. A remote attacker can exploit the id parameter in the adv2.php component to obtain sensitive information. As a temporary workaround, it is recommended to disable the id parameter in th...
PT-2024-31264 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the id parameter in the "adv2.php" component. Recommendations: For ZZCMS versions 2023 and earlier, consider...
CVE-2024-44817: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component...
CVE-2024-44921
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del...