Vulnerability CVE-2023-49686
Published: 2023-12-22

Description:
Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtTotal' parameter of the Employer/InsertWalkin.php resource does not validate the characters received and they are sent unfiltered to the database.

Type:

CWE-89

 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://fluidattacks.com/advisories/pollini/
https://www.kashipara.com/
Copyright 2026, cxsecurity.com

 

Back to Top