Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-8471

SQL injection vulnerability in Job Portal

Description

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHPGurukul Job Portal

Default version status: unaffected

  • 1.0affected

References