Phpgurukul Job Portal vulnerabilities

12 CVEs affecting Phpgurukul Job Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8473, published 2024-09-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-10225, published 2020-03-08. Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days. An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to…
CVE-2024-8463, published 2024-09-05. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.
CVE-2024-8470, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored…
CVE-2024-8469, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.
CVE-2024-8468, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.
CVE-2024-8467, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.
CVE-2024-8466, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored…
CVE-2024-8465, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in…
CVE-2024-8464, published 2024-09-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information…
CVE-2024-8473, published 2024-09-05. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an…

Latest

CVE-2024-8472, published 2024-09-05. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an…
CVE-2024-8471, published 2024-09-05. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an…