Attackers Can Retrieve All Information Stored in /jobportal/index.php through a Specially Designed Query

CVE-2024-8468

Summary

A vulnerability exists in the Job Portal application that allows attackers to exploit an SQL injection flaw through a specially crafted query sent via the search parameter in /jobportal/index.php. This poses a significant risk as it enables unauthorized access to sensitive information stored within the database, potentially leading to data breaches and unauthorized data manipulation.

References