Database Injection Vulnerability

CVE-2024-8466

Summary

An SQL injection vulnerability exists within the job portal software that can be exploited by an attacker through the CATEGORY parameter in the controller file at /jobportal/admin/category/controller.php. By crafting a specific SQL query, the attacker can gain unauthorized access to all information stored in the database, which poses a significant risk to the confidentiality and integrity of sensitive user data. This vulnerability highlights the need for robust input validation and security measures to prevent unauthorized data access.

References