CVE-2024-2670

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/vacancy/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257370 is the identifier assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:campcodes:online_job_finder_system:1.0:*:*:*:*:*:*:*

History

21 Feb 2025, 15:15

Type Values Removed Values Added
CWE CWE-89
First Time Campcodes online Job Finder System
Campcodes
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:campcodes:online_job_finder_system:1.0:*:*:*:*:*:*:*
References () https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%203.pdf - () https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%203.pdf - Exploit
References () https://vuldb.com/?ctiid.257370 - () https://vuldb.com/?ctiid.257370 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.257370 - () https://vuldb.com/?id.257370 - Permissions Required, VDB Entry

20 Mar 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-20 04:15

Updated : 2025-02-21 15:15


NVD link : CVE-2024-2670

Mitre link : CVE-2024-2670


JSON object : View

Products Affected

campcodes

  • online_job_finder_system
CWE

No CWE.