Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: PHPGurukul Component: Job Portal Clear all filters
TI-2024-07855 CVE-2024-8473 · GHSA-m4q6-r3hq-hfgq

SQL injection vulnerability in Job Portal

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00278 Published 2024-09-05 No fix listed CWE-79
TI-2024-07854 CVE-2024-8472 · GHSA-vv26-3gxj-65r5

SQL injection vulnerability in Job Portal

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00278 Published 2024-09-05 No fix listed CWE-79
TI-2024-07853 CVE-2024-8471 · GHSA-cf94-f85j-g689

SQL injection vulnerability in Job Portal

Priority LOW 28

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00254 Published 2024-09-05 No fix listed CWE-79
TI-2024-07852 CVE-2024-8470 · GHSA-pxg7-xwx3-q885

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07851 CVE-2024-8469 · GHSA-vrwg-mgfh-8rc8

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07850 CVE-2024-8468 · GHSA-mm65-4gm3-h22v

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07849 CVE-2024-8467 · GHSA-r9w6-vj2c-577r

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07848 CVE-2024-8466 · GHSA-7xv3-rpxg-r28m

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07847 CVE-2024-8465 · GHSA-hjrp-754v-h7fj

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07846 CVE-2024-8464 · GHSA-f7xr-hxhp-pp5m

SQL injection vulnerability in Job Portal

Priority MEDIUM 43

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information stored in it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2024-09-05 No fix listed CWE-89
TI-2024-07845 CVE-2024-8463 · GHSA-phhw-57mq-75j6

File upload restriction bypass vulnerability in Job Portal

Priority MEDIUM 43

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00513 Published 2024-09-05 No fix listed CWE-434