SQL injection vulnerability could expose sensitive information

CVE-2024-8470

Summary

A SQL injection vulnerability exists in the Job Portal application, where an attacker can manipulate the CATEGORY parameter within the /jobportal/admin/vacancy/controller.php endpoint. By sending crafted SQL queries, attackers may gain unauthorized access to sensitive information stored in the database, potentially compromising user data and other critical information within the application. Prompt action is necessary to mitigate this risk and strengthen the application's security posture.

References