CERT24GHSA-fwc9-vf8f-9fg8: SQL injection vulnerability in EmployeeRecruitmentSystemLoading data…
CERT24Threat Observatory
Period

GHSA-fwc9-vf8f-9fg8: SQL injection vulnerability in EmployeeRecruitmentSystem

A flaw affects krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. The issue is in the mysql_query function in /source/registerform2.php, part of the Registration Wizard. Manipulating the university/institute/branch/degree/status/cpi/semester/experience arguments can lead to SQL injection. The attack can be launched remotely. An exploit has been published and may be used.

← Back to intelligence

GHSA-fwc9-vf8f-9fg8: SQL injection vulnerability in EmployeeRecruitmentSystem

A flaw affects krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. The issue is in the mysql_query function in /source/registerform2.php, part of the Registration Wizard. Manipulating the university/institute/branch/degree/status/cpi/semester/experience arguments can lead to SQL injection. The attack can be launched remotely. An exploit has been published and may be used.