GHSA-r3jr-pj27-m854: SQL injection vulnerability in EmployeeRecruitmentSystem
A vulnerability affects krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. In the Registration component, manipulation of the firstname, middlename, lastname, gender, birthdate, state, statespecify, city, or cityspecify arguments to the mysql_query function in /source/registerform1.php can result in SQL injection. The attack can be initiated remotely, and the exploit is public and may be used.
CERT24