Code-projects Online Job Portal vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Code-projects Online Job Portal: 5 record(s), with affected versions and fixes.
CVE-2026-15678
Low · 3.5
CWE-79 Jul 14, 2026
code-projects Online Job Portal DetailJob.php cross site scripting
A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-15677
High · 7.3
CWE-284 Jul 14, 2026
code-projects Online Job Portal JobSeekerInsert.php unrestricted upload
A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-15676
High · 7.3
CWE-74 Jul 14, 2026
code-projects Online Job Portal DeleteUser.php sql injection
A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVE-2026-15675
High · 7.3
CWE-74 Jul 14, 2026
code-projects Online Job Portal EditUser.php sql injection
A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
CVE-2026-14660
High · 7.3
CWE-74 Jul 4, 2026
code-projects Online Job Portal login.php sql injection
A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.