PT-2023-31291 · Unknown · Job Portal

CVE-2023-49682 · Publicado 2023-12-21 · Atualizado 2024-01-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Job Portal version 1.0

Description The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtDate parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, and they are sent unfiltered to the database.

Recommendations For Job Portal version 1.0, consider validating and filtering the input for the txtDate parameter in the "Employer/InsertWalkin.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "Employer/InsertWalkin.php" resource until a proper fix is applied.

Exploit

Identificadores relacionados

CVE-2023-49682

Produtos afetados

Job Portal

Referências · 4

• 🔥 https://fluidattacks.com/advisories/pollini · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-49682 · Nota de Segurança
• https://t.me/cvenotify/65281 · Publicação no Telegram
• https://t.me/cvenotify/64793 · Publicação no Telegram