CVE-2024-8167 – code-projects Job Portal forget.php sql injection

https://notcve.org/view.php?id=CVE-2024-8167

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. • https://code-projects.org https://github.com/t4rrega/cve/issues/1 https://vuldb.com/?ctiid.275766 https://vuldb.com/?id.275766 https://vuldb.com/?submit.397714 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •