code-projects Job Recruitment 1.0 /_parse/_all_edits.php add_xp job_company SQL ଇଞ୍ଜେକ୍ସନ

Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame code-projects Job Recruitment 1.0 keessatti argameera. Miidhamni argame is hojii add_xp faayilii /_parse/_all_edits.php keessa. Wanti jijjiirame irratti job_company gara SQL ଇଞ୍ଜେକ୍ସନ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-89 si geessa. Odeeffannoon kun yeroo 12/26/2024 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti argama. Dogoggorri kun CVE-2024-12963 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get best quality of vulnerability data, you may have to visit VulDB.

5 ଆଡାପ୍ଟେସନ୍ · 114 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
12/26/2024 08:48 AM		ଅଦ୍ୟତନ 1/4
12/26/2024 12:30 PM		ଅଦ୍ୟତନ 2/4
12/26/2024 12:33 PM		ଅଦ୍ୟତନ 3/4
12/26/2024 10:32 PM		ଅଦ୍ୟତନ 4/4
12/27/2024 10:04 PM
cvss4_vuldb_ePPPPP
cvss2_vuldb_rlNDNDNDNDND
cvss3_vuldb_rlXXXXX
cvss4_vuldb_atNNNNN
cvss4_vuldb_scNNNNN
cvss4_vuldb_siNNNNN
cvss4_vuldb_saNNNNN
cvss2_vuldb_basescore7.57.57.57.57.5
cvss2_vuldb_tempscore6.46.46.46.46.4
cvss3_vuldb_basescore7.37.37.37.37.3
cvss3_vuldb_tempscore6.66.66.66.66.6
cvss3_meta_basescore7.37.38.68.28.2
cvss3_meta_tempscore6.66.67.97.77.7
cvss4_vuldb_bscore6.96.96.96.96.9
cvss4_vuldb_btscore5.55.55.55.55.5
advisory_date1735167600 (12/26/2024)1735167600 (12/26/2024)1735167600 (12/26/2024)1735167600 (12/26/2024)1735167600 (12/26/2024)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k$0-$5k
software_vendorcode-projectscode-projectscode-projectscode-projectscode-projects
software_nameJob RecruitmentJob RecruitmentJob RecruitmentJob RecruitmentJob Recruitment
software_version1.01.01.01.01.0
software_file/_parse/_all_edits.php/_parse/_all_edits.php/_parse/_all_edits.php/_parse/_all_edits.php/_parse/_all_edits.php
software_functionadd_xpadd_xpadd_xpadd_xpadd_xp
software_argumentjob_companyjob_companyjob_companyjob_companyjob_company
vulnerability_cweCWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)
vulnerability_risk22222
cvss3_vuldb_avNNNNN
cvss3_vuldb_acLLLLL
cvss3_vuldb_prNNNNN
cvss3_vuldb_uiNNNNN
cvss3_vuldb_sUUUUU
cvss3_vuldb_cLLLLL
cvss3_vuldb_iLLLLL
cvss3_vuldb_aLLLLL
cvss3_vuldb_ePPPPP
cvss3_vuldb_rcRRRRR
advisory_urlhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.md
exploit_availability11111
exploit_publicity11111
exploit_urlhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.mdhttps://github.com/UnrealdDei/cve/blob/main/sql6.md
source_cveCVE-2024-12963CVE-2024-12963CVE-2024-12963CVE-2024-12963CVE-2024-12963
cna_responsibleVulDBVulDBVulDBVulDBVulDB
decision_summaryOther parameters might be affected as well.Other parameters might be affected as well.Other parameters might be affected as well.Other parameters might be affected as well.Other parameters might be affected as well.
software_typeProject Management SoftwareProject Management SoftwareProject Management SoftwareProject Management SoftwareProject Management Software
cvss2_vuldb_avNNNNN
cvss2_vuldb_acLLLLL
cvss2_vuldb_auNNNNN
cvss2_vuldb_ciPPPPP
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiPPPPP
cvss2_vuldb_ePOCPOCPOCPOCPOC
cvss2_vuldb_rcURURURURUR
cvss4_vuldb_avNNNNN
cvss4_vuldb_acLLLLL
cvss4_vuldb_prNNNNN
cvss4_vuldb_uiNNNNN
cvss4_vuldb_vcLLLLL
cvss4_vuldb_viLLLLL
cvss4_vuldb_vaLLLLL
cvss2_researcher_aiCCCC
cvss3_researcher_cHHHH
cvss3_researcher_avNNNN
cvss3_researcher_rlWWWW
cvss3_researcher_iHHHH
cvss2_researcher_iiCCCC
cvss3_researcher_acLLLL
cvss3_researcher_prNNNN
cvss3_researcher_rcCCCC
cvss2_researcher_auNNNN
cvss3_researcher_aHHHH
cvss3_researcher_ePPPP
cvss2_researcher_avNNNN
cvss2_researcher_rlWWWW
cvss2_researcher_ciCCCC
cvss3_researcher_uiNNNN
cvss2_researcher_rcCCCC
cvss2_researcher_acLLLL
cvss2_researcher_ePOCPOCPOCPOC
cvss3_researcher_sCCCC
cvss2_researcher_basescore10.010.010.0
cvss3_researcher_basescore10.010.010.0
cve_nvd_summaryA vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_all_edits.php. The manipulation of the argument job_company leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_all_edits.php. The manipulation of the argument job_company leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
cvss4_cna_avNN
cvss4_cna_acLL
cvss4_cna_atNN
cvss4_cna_prNN
cvss4_cna_uiNN
cvss4_cna_vcLL
cvss4_cna_viLL
cvss4_cna_vaLL
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore6.96.9
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prNN
cvss3_cna_uiNN
cvss3_cna_sUU
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aLL
cvss3_cna_basescore7.37.3
cvss2_cna_avNN
cvss2_cna_acLL
cvss2_cna_auNN
cvss2_cna_ciPP
cvss2_cna_iiPP
cvss2_cna_aiPP
cvss2_cna_basescore7.57.5
cve_nvd_summaryesSe ha encontrado una vulnerabilidad en code-projects Job Recruitment 1.0 y se ha clasificado como crítica. Este problema afecta a la función add_xp del archivo /_parse/_all_edits.php. La manipulación del argumento job_company provoca una inyección SQL. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y puede utilizarse. También pueden verse afectados otros parámetros.

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!