Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-15676: code-projects Online Job Portal User Deletion SQL Injection
CVE-2026-15676 · published 3 months ago
Summary
An attacker can manipulate user deletion requests, potentially accessing sensitive data or taking control of the system. This issue affects code-projects Online Job Portal versions up to 1.0. Update to a fixed version to protect against potential attacks.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| code-projects | online job portal | 1.0 |
Original advisory text
A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in...
A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published14 Jul 2026
Updated4 Nov 2026
First seen14 Jul 2026
Track software like this
Free during beta