CVE-2024-11241

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Job Recruitment	1.0
code-projects	job_recruitment	1.0

References

https://code-projects.org/Product
https://github.com/Anti-Entropy-Zhurong/cve/blob/main/sql-1.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.284677Permissions Required, VDB Entry
https://vuldb.com/?id.284677Permissions Required, VDB Entry
https://vuldb.com/?submit.442036Third Party Advisory, VDB Entry

Timeline

Published: Nov 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-112427.2A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ad CVE-2024-112436.1A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /s CVE-2024-112449.8A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-CVE-2024-112457.5A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing CVE-2024-112465.4A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /CVE-2024-112475.4A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an CVE-2024-112488.8A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of CVE-2024-11255.4The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capa CVE-2024-112509.8A vulnerability was found in code-projects Inventory Management up to 1.0. It has been declared as critical. This vulnerability affects unkn CVE-2024-112518.8A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some unknown processing of CVE-2024-112526.1The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon CVE-2024-112537.2A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firm