CVE-2023-49685

02 Jan 2024, 20:15

Type	Values Removed	Values Added
CVSS	v2 : unknown v3 : 9.8	v2 : unknown v3 : unknown
Summary	Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtTime' parameter of the Employer/InsertWalkin.php resource does not validate the characters received and they are sent unfiltered to the database.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CPE	cpe:2.3:a:kashipara:job_portal:1.0:*:*:*:*:*:*:*
CWE	CWE-89
References	{'url': 'https://www.kashipara.com/', 'name': 'https://www.kashipara.com/', 'tags': ['Product'], 'refsource': ''} {'url': 'https://fluidattacks.com/advisories/pollini/', 'name': 'https://fluidattacks.com/advisories/pollini/', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': ''}

---

27 Dec 2023, 20:48

Type	Values Removed	Values Added
First Time		Kashipara Kashipara job Portal
CPE		cpe:2.3:a:kashipara:job_portal:1.0:*:*:*:*:*:*:*
References	() https://www.kashipara.com/ -	() https://www.kashipara.com/ - Product
References	() https://fluidattacks.com/advisories/pollini/ -	() https://fluidattacks.com/advisories/pollini/ - Exploit, Third Party Advisory

---

22 Dec 2023, 00:15

Type	Values Removed	Values Added
New CVE

---