PT-2026-57969 · Code Projects · Online Job Portal

Dazhi · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15675

Mitre

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-15675

Produtos afetados

Online Job Portal

Referências · 7

• 🔥 https://github.com/shihuizhang-dazhi/MY-CVE/issues/3 · Exploit
• https://vuldb.com/submit/855969 · Nota
• https://vuldb.com/vuln/378165/cti · Nota
• https://code-projects.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15675 · Nota de Segurança
• https://vuldb.com/vuln/378165 · Nota
• https://vuldb.com/cve/CVE-2026-15675 · Nota