The vulnerability is an SQL Injection in Netartmedia Jobs Portal 6.1 that occurs in loginaction.php through the Email parameter. Attackers can send crafted POST requests containing malicious SQL code. This allows unauthenticated users to read sensitive data from the database or bypass authentication, resulting in data theft and unauthorized access. The weakness is identified as CWE-89.

The affected product is Netartmedia Jobs Portal version 6.1. No other versions or vendors are listed in the CNA data. The SQL injection specifically targets the loginaction.php script used for user login.

The CVSS score is 8.8, indicating a high severity vulnerability. The EPSS score is less than 1%, suggesting a low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is a web-based POST request to loginaction.php, which does not require authentication. Attackers can exploit the flaw by sending malicious payloads to the Email field; no additional prerequisites are stated in the description. Overall risk is high severity but low exploitation likelihood.