CVE-2024-12963

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 26, 2024
Updated: Dec 27, 2024
CWE ID 74
CWE ID 89

Summary

CVE-2024-12963 is a critical vulnerability affecting the Job Recruitment 1.0 software by code-projects. The issue lies in the function add_xp of the file _parse/_all_edits.php, where the argument job_company is susceptible to SQL injection. An attacker can exploit this remotely, potentially manipulating other parameters as well. The exploit for this vulnerability has been made public, increasing the risk for potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Job Recruitment

Affected Vendors

  • Code Projects

Advisories, Assessments, and Mitigations