PT-2023-31291 · Unknown · Job Portal

Published 2023-12-21 · Updated 2024-01-02 · CVE-2023-49682

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Job Portal version 1.0

Description The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtDate parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, and they are sent unfiltered to the database.

Recommendations For Job Portal version 1.0, consider validating and filtering the input for the txtDate parameter in the "Employer/InsertWalkin.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "Employer/InsertWalkin.php" resource until a proper fix is applied.

Exploit

Related Identifiers

CVE-2023-49682

Affected Products

Job Portal

References · 4

• 🔥 https://fluidattacks.com/advisories/pollini · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-49682 · Security Note
• https://t.me/cvenotify/65281 · Telegram Post
• https://t.me/cvenotify/64793 · Telegram Post