by Kastro
Paper/Archive/CVE-2024-8463

CVE-2024-8463

PHPGurukul Job Portal — File upload restriction bypass vulnerability in Job Portal

EPSS 0.5%CVSS 9.9
critical.is priorityof 100
38
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 43.7.437 × 208.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell.

Affected

ProductAffectedFixed inSource
Job Portal1.0–CNA
job_portal1.0–CISA-ADP

Scores by source

INCIBE (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refincibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-job-portal