NA - CVE-2024-8462 - A vulnerability was found in Windmill 1.380.0....
A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request...
NA - CVE-2024-8463 - File upload restriction bypass vulnerability in...
File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.
NA - CVE-2024-8464 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /jobportal/admin/applicants/controller.php, and retrieve all the information...
NA - CVE-2024-8465 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in...
NA - CVE-2024-8466 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information...
NA - CVE-2024-8467 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it.
NA - CVE-2024-8468 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it.
NA - CVE-2024-8469 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it.
NA - CVE-2024-8470 - SQL injection vulnerability, by which an...
SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information...
NA - CVE-2024-8471 - Cross-Site Scripting (XSS) vulnerability,...
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of...