Code-Projects Online Job Portal vulnerabilities

CVE-2023-41014 [CRITICAL] CWE-89 CVE-2023-41014: code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter fo code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."

CVE-2026-15677 [HIGH] CWE-284 CVE-2026-15677: A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown funct A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-15676 [HIGH] CWE-74 CVE-2026-15676: A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted eleme A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

CVE-2026-15675 [HIGH] CWE-74 CVE-2026-15675: A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an un A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

CVE-2026-14660 [HIGH] CWE-74 CVE-2026-14660: A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

CVE-2023-41015 [MEDIUM] CWE-89 CVE-2023-41015: code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?J code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?JobId=1.

CVE-2026-15678 [LOW] CWE-79 CVE-2026-15678: A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an u A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.