| शीर्षक | code-projects Online Job Portal 1.0 SQL Injection |
|---|
| विवरण | An unauthenticated SQL injection vulnerability exists in login.php of the Online Job Portal System 1.0. The application fails to properly sanitize user-supplied input for the txtUser and txtPass parameters before concatenating them into SQL queries. An unauthenticated remote attacker can exploit this flaw by injecting specially crafted SQL payloads, leading to authentication bypass, unauthorized access to the administrative panel, and full database disclosure, including administrator credentials and sensitive PII from job seekers and employers. |
|---|
| स्रोत | ⚠️ https://github.com/aiyuyuyu/cve/blob/main/job_portal_sql.md |
|---|
| उपयोगकर्ता | yuyuyu (UID 97935) |
|---|
| सबमिशन | 03/06/2026 08:38 AM (1 महीना पहले) |
|---|
| संयम | 03/07/2026 08:53 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 376174 [code-projects Online Job Portal 1.0 login.php txtUser/txtPass SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|