High severity · published Sep 5, 2024
CVE-2024-8463
File upload restriction bypass vulnerability in Job Portal
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JP
Job Portal · PHPGurukul
1.0 · source: vendor, NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-8463
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-8463
Third Party Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-job-portal
More from Job Portal
9.8
CVE-2020-10225
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0
7.5
CVE-2024-8470
SQL injection vulnerability in Job Portal
7.5
CVE-2024-8469
SQL injection vulnerability in Job Portal
7.5
CVE-2024-8468
SQL injection vulnerability in Job Portal
7.5
CVE-2024-8467
SQL injection vulnerability in Job Portal