PT-2026-57971 · Code Projects · Online Job Portal

Dazhi · Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-15677

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-15677

Affected Products

Online Job Portal

References · 7

• 🔥 https://github.com/shihuizhang-dazhi/MY-CVE/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15677 · Security Note
• https://vuldb.com/vuln/378167 · Note
• https://vuldb.com/vuln/378167/cti · Note
• https://code-projects.org · Note
• https://vuldb.com/cve/CVE-2026-15677 · Note
• https://vuldb.com/submit/855977 · Note