code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."
References
Link | Resource |
---|---|
https://github.com/ASR511-OO7/CVE-2023-41014/blob/main/CVE-28 | Third Party Advisory |
https://github.com/ASR511-OO7/CVE-2023-41014/blob/main/CVE-28 | Third Party Advisory |
Configurations
History
21 Jan 2025, 17:04
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:code-projects:online_job_portal:1.0:*:*:*:*:*:*:* | |
CWE | CWE-89 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Code-projects
Code-projects online Job Portal |
|
References | () https://github.com/ASR511-OO7/CVE-2023-41014/blob/main/CVE-28 - Third Party Advisory |
Information
Published : 2024-03-07 09:15
Updated : 2025-03-26 21:15
NVD link : CVE-2023-41014
Mitre link : CVE-2023-41014
CVE.ORG link : CVE-2023-41014
JSON object : View
Products Affected
code-projects
- online_job_portal
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')