PT-2023-31294 · Unknown · Job Portal

CVE-2023-49685 · Publicado 2023-12-22 · Atualizado 2024-01-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Job Portal version 1.0

Description The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtTime parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, and they are sent unfiltered to the database.

Recommendations For Job Portal version 1.0, as a temporary workaround, consider validating and filtering the txtTime parameter in the Employer/InsertWalkin.php resource to prevent SQL injection attacks. Restrict access to the Employer/InsertWalkin.php resource until a proper fix is applied.

Exploit

Identificadores relacionados

CVE-2023-49685

Produtos afetados

Job Portal

Referências · 4

• 🔥 https://fluidattacks.com/advisories/pollini · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-49685 · Nota de Segurança
• https://t.me/cvenotify/64799 · Publicação no Telegram
• https://t.me/cvenotify/65285 · Publicação no Telegram