Technical impact
The vulnerability is a classic SQL injection flaw located in the category parameter of /jobportal/index.php in Sourcecodester Online Job Portal phppdo 1.0. By supplying crafted input, an attacker can inject arbitrary SQL statements that are executed against the database, potentially allowing the attacker to read sensitive applicant data, alter job listings, or delete records, thereby compromising confidentiality, integrity, and availability of the portal data.
Affected Systems
Sourcecodester Online Job Portal phppdo version 1.0. No other vendors or product versions are documented as affected in the CVE record.
Risk and Exploitability
The EPSS score is less than 1% and the vulnerability is not listed in CISA's KEV catalog, indicating no confirmed exploitation reports to date. The CVSS score of 6.5 denotes a moderate severity. The vulnerability can be triggered through an HTTP request to the job portal; since the description does not mention authentication, it is inferred that no authentication is required to reach the vulnerable parameter. Consequently, an adversary with network access to the web application could potentially exploit the flaw with low effort. No other mitigations are reported aside from patching or code changes.
