CVE-2024-11076 code-projects Job Recruitment activation.php sql injection

What is CVE-2024-11076?

CVE-2024-11076 is a medium-severity SQL injection vulnerability in code-projects Job Recruitment, published on 11 Nov 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Weakness: CWE-89, CWE-74

Which versions are affected by CVE-2024-11076?

It affects 1 product.

Products include Anisha Job Recruitment.

How do I fix CVE-2024-11076?

No fix has been published for CVE-2024-11076 yet. Limit exposure of the affected software until one is available.

Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.

Is CVE-2024-11076 being exploited?

There is no known exploitation of CVE-2024-11076 in the wild and no public exploit code.

Other vulnerabilities in code-projects Job Recruitment

• CVE-2025-0806 code-projects Job Recruitment _call_job_search_ajax.php cross site scripting Medium 6.9
• CVE-2024-12978 code-projects Job Recruitment _all_edits.php add_req sql injection Medium 6.9
• CVE-2024-12979 code-projects Job Recruitment _all_edits.php cn_update cross site scripting Medium 6.9
• CVE-2024-12980 code-projects Job Recruitment _all_edits.php fln_update cross site scripting Medium 6.9
• CVE-2024-12962 code-projects Job Recruitment _all_edits.php sql injection Medium 6.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mj36-fqcq-5fcp.