cve/2024/CVE-2024-8167.md

CVE-2024-8167

Description

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

POC

Reference

• https://github.com/t4rrega/cve/issues/1

Github

• https://github.com/fkie-cad/nvd-json-data-feeds