Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-8472 EUVD-2024-49205GHSA-vv26-3gxj-65r5

SQL injection vulnerability in Job Portal

Published Sep 5, 2024 · Updated Sep 5, 2024 · Assigned by INCIBE

Description

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through multiple parameters in /jobportal/index.php.

Affected products

VendorProductAffectedFixed
PHPGurukul Job Portal 1.0 —

References