PT-2023-31294 · Unknown · Job Portal

Published 2023-12-22 · Updated 2024-01-02 · CVE-2023-49685

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Job Portal version 1.0

Description The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtTime parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, and they are sent unfiltered to the database.

Recommendations For Job Portal version 1.0, as a temporary workaround, consider validating and filtering the txtTime parameter in the Employer/InsertWalkin.php resource to prevent SQL injection attacks. Restrict access to the Employer/InsertWalkin.php resource until a proper fix is applied.

Exploit

Related Identifiers

CVE-2023-49685

Affected Products

Job Portal

References · 4

• 🔥 https://fluidattacks.com/advisories/pollini · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-49685 · Security Note
• https://t.me/cvenotify/64799 · Telegram Post
• https://t.me/cvenotify/65285 · Telegram Post