An unauthenticated SQL injection vulnerability in NCrypted Jobgator enables attackers to exfiltrate sensitive database information through malicious POST requests.

The application fails to properly sanitize user input provided to the experience parameter within the agents Find-Jobs endpoint. This flaw allows an unauthenticated attacker to inject arbitrary SQL commands into the backend database, potentially resulting in unauthorized data extraction.

Successful exploitation of this vulnerability poses a severe risk to the confidentiality and integrity of the organization's data. With a CVSS score of 8.2, this high-severity flaw could allow an attacker to dump entire database tables, leading to a significant data breach, loss of customer trust, and potential regulatory non-compliance.

Immediate Action: As no official patch is available from the vendor, administrators should restrict access to the agents Find-Jobs endpoint at the network or application level until a secure version is identified or a vendor-supplied patch is released.

Proactive Monitoring: Security teams should monitor web server and database logs for anomalous POST requests containing SQL keywords, such as OR, UNION, or comment characters, directed toward the Find-Jobs endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the experience parameter.

Public Exploit Available: Yes, a public proof-of-concept exploit is available via ExploitDB (EDB-ID: 46663).

Given the public availability of exploit code and the high severity of SQL injection, organizations using NCrypted Jobgator must prioritize the implementation of compensating controls immediately. If the application cannot be secured through a WAF or access restrictions, consider isolating the affected system from public-facing networks to prevent unauthorized access until an official resolution is provided by the vendor.