852 matches found
WordPress Job Portal < 2.0.6 - SQL Injection
The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape the city parameter before using it in a SQL statement,leading to a SQL injection vulnerability that is exploitable by unauthenticated users. This vulnerability can be used to extractsensitive data from the database or...
CVE-2026-7071-access-Control
CodeAstroオンライン求人ポータル（PHP MySQL）における未認証の履歴書公開 詳細 ベンダー: CodeAstro 製品: Online Job Portal Project in PHP MySQL バージョン: 1.0 脆弱性タイプ: 不適切なアクセス制御 / 情報漏えい CWE: CWE-284、CWE-200、CWE-548 影響を受けるエンドポイント: /users/user-cvs/ 影響: すべてのユーザーの履歴書への未認証アクセス 説明...
CVE-2026-7028-SQLI
CodeAstro-Online-Job-Portal-SQLi-Delete-All 详细信息 供应商： CodeAstro 产品： Online Job Portal Project in PHP MySQL 版本： 1.0 漏洞类型： SQL 注入 CWE： CWE-89 受影响端点： /admin/jobs-admins/delete-jobs.php 参数： id GET 影响： 可删除数据库中的所有职位记录 描述 在 CodeAstro Online Job Portal 的管理员职位删除功能中发现了一个 SQL 注入漏洞。 该应用程序直接在 SQL 查询中使用 id...
CVE-2026-81299
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
CVE-2026-81299
CVE-2026-81299 affects the WordPress WP Job Portal plugin, versions
CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
EUVD-2026-67729
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...
CVE-2026-77681
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...
EUVD-2026-63876
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-77681
CodeAstro Online Job Portal 1.0 is affected by an unrestricted file upload vulnerability in the file /users/update-profile.php. Manipulation of the Name argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, leading to low impact on confidentiality, integrity...
EUVD-2026-62220
A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...
CVE-2026-75986
SQL injection in code-projects Online Job Portal System 1.0 via the txtUserName argument in /ForPass.php (Password Recovery). No authentication required; CVSS 7.3 (HIGH). Proof-of-concept exploit disclosed. No patch version is mentioned in the provided documents.
CVE-2026-75986 code-projects Online Job Portal System Password Recovery ForPass.php sql injection
A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
EUVD-2026-53987
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...