416 matches found
CVE-2026-75986
SQL injection in code-projects Online Job Portal System 1.0 via the txtUserName argument in /ForPass.php (Password Recovery). No authentication required; CVSS 7.3 (HIGH). Proof-of-concept exploit disclosed. No patch version is mentioned in the provided documents.
CVE-2026-75986 code-projects Online Job Portal System Password Recovery ForPass.php sql injection
A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...
CVE-2026-75986 code-projects Online Job Portal System Password Recovery ForPass.php sql injection
A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...
CVE-2026-75986: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...
CVE-2026-1428
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2026-1427
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2026-1428 WellChoose｜Single Sign-On Portal System - OS Command Injection
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2026-1428 WellChoose｜Single Sign-On Portal System - OS Command Injection
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2026-1428
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2026-1427
CVE-2026-1427 concerns the WellChoose Single Sign-On Portal System, where an OS Command Injection flaw allows authenticated remote attackers to inject and execute arbitrary commands on the server. The connected sources identify the affected product (WellChoose SSO Portal System), and the root cau...
CVE-2026-1427
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
PT-2026-4732
Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified WellChoose Organization Portal System affected versions not specified Description An OS Command Injection issue exists in the WellChoose Portal Systems, potentially allowi...
PT-2026-4734
Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified Description The WellChoose Single Sign-On Portal System is susceptible to a Reflected Cross-site Scripting issue. This allows attackers with existing access to execute...
CVE-2026-1428: Improper Neutralization of Special Elements used in an OS Command
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
WellChoose Single Sign-On Portal System Cross-Site Script Vulnerabilities
WellChoose Single Sign-On Portal System is a single-sign-on portal system developed by WellChoose, a company based in Taiwan, China. The WellChoose Single Sign-On Portal System has a cross-site scripting vulnerability. This vulnerability stems from the presence of reflective cross-site scripts,...
CVE-2026-1429: Improper Neutralization of Input During Web Page Generation
Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...
CVE-2026-1427: Improper Neutralization of Special Elements used in an OS Command
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2022-27365
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceDance.phpdel...
