SQL Injection Vulnerability in /jobportal/admin/user/controller.php

CVE-2024-8465

Summary

SQL injection vulnerability exists within the Job Portal application, specifically in the admin interface's user controller. By exploiting this flaw, an attacker can craft a malicious query through the user_id parameter in the controller.php file. This allows unauthorized access to all information stored in the database, posing a significant risk to sensitive user data and overall application integrity.

References