Phpgurukul Job Portal
11 CVEs affecting Phpgurukul Job Portal. Latest disclosed: 2024-09-05. Critical: 8, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8463 | Critical | 9.9 | 2024-09-05 | File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via we… |
CVE-2024-8470 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php… |
CVE-2024-8469 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrie… |
CVE-2024-8468 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the… |
CVE-2024-8467 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrie… |
CVE-2024-8466 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php… |
CVE-2024-8465 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and… |
CVE-2024-8464 | Critical | 9.8 | 2024-09-05 | SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.ph… |
CVE-2024-8473 | Medium | 6.3 | 2024-09-05 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attack… |
CVE-2024-8472 | Medium | 6.3 | 2024-09-05 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attack… |
CVE-2024-8471 | Medium | 6.3 | 2024-09-05 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attack… |