CVE-2023-49688

Summary

CVE-2023-49688: The Job Portal v1.0 is found to have unauthenticated SQL injection vulnerabilities. The 'txtUser' parameter in the login.php resource fails to validate user input, allowing attackers to inject malicious SQL commands directly into the database. This weakness could result in unauthorized access to sensitive data or even system takeover. Unfiltered user input poses a significant risk to the security of the portal.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.