PT-2026-57970 · Code Projects · Online Job Portal

Dazhi · Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-15676

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions code-projects Online Job Portal versions prior to 1.1

Description A security flaw exists in the /Admin/DeleteUser.php file. A manipulation of an unknown function within this file allows for SQL injection, which is a technique used to interfere with the queries that an application makes to its database. This issue can be exploited remotely.

Recommendations Update code-projects Online Job Portal to a version newer than 1.0. As a temporary mitigation, restrict access to the /Admin/DeleteUser.php file.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-15676

Affected Products

Online Job Portal

References · 9

• 🔥 https://github.com/shihuizhang-dazhi/MY-CVE/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15676 · Security Note
• https://vuldb.com/vuln/378166 · Note
• https://vuldb.com/vuln/378166/cti · Note
• https://code-projects.org · Note
• https://twitter.com/infoflowcloud/status/2076981623199764690 · Twitter Post
• https://twitter.com/CVEnew/status/2076980615212093839 · Twitter Post
• https://vuldb.com/submit/855976 · Note
• https://vuldb.com/cve/CVE-2026-15676 · Note