Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_job_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Job Portal (1cd8d465-8274-5fb7-a487-29bce7b9d424)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15678 vulnerable 2026-07-29 00:26:18.358127 code-projects Online Job Portal DetailJob.php cross site scripting
LOW (3.5)
A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-07-14T06:30:08.294Z
Updated: 2026-07-15T14:58:11.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15677 vulnerable 2026-07-29 00:26:18.357911 code-projects Online Job Portal JobSeekerInsert.php unrestricted upload
HIGH (7.3)
A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-07-14T06:15:07.720Z
Updated: 2026-07-14T12:23:21.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15676 vulnerable 2026-07-29 00:26:18.357682 code-projects Online Job Portal DeleteUser.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-07-14T06:00:08.240Z
Updated: 2026-07-14T12:47:06.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15675 vulnerable 2026-07-29 00:26:18.357433 code-projects Online Job Portal EditUser.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-07-14T05:45:07.884Z
Updated: 2026-07-14T14:30:22.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14660 vulnerable 2026-07-29 00:26:17.449079 code-projects Online Job Portal login.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2026-07-04T22:30:09.316Z
Updated: 2026-07-06T17:41:03.762Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.