Online Job Search Engine
Monthly
A vulnerability was detected in code-projects Online Job Search Engine 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in code-projects Online Job Search Engine 1.0 via the txtspecialization parameter in searchjob.php allows unauthenticated remote attackers to execute arbitrary SQL commands, leading to unauthorized data access or modification. A publicly disclosed exploit exists, but the affected product is a niche educational project with low real-world deployment, and no active exploitation has been reported.
SQL injection in Online Job Search Engine 1.0 allows remote attackers to manipulate the txtjob
SQL injection in Online Job Search Engine 1.0 allows remote attackers to manipulate database queries via the txtusername parameter in /registration.php. The vulnerability enables extraction, modification, or deletion of database contents and could bypass authentication. Exploit code is publicly available, though active exploitation has not been confirmed.
A vulnerability was detected in code-projects Online Job Search Engine 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in code-projects Online Job Search Engine 1.0 via the txtspecialization parameter in searchjob.php allows unauthenticated remote attackers to execute arbitrary SQL commands, leading to unauthorized data access or modification. A publicly disclosed exploit exists, but the affected product is a niche educational project with low real-world deployment, and no active exploitation has been reported.
SQL injection in Online Job Search Engine 1.0 allows remote attackers to manipulate the txtjob
SQL injection in Online Job Search Engine 1.0 allows remote attackers to manipulate database queries via the txtusername parameter in /registration.php. The vulnerability enables extraction, modification, or deletion of database contents and could bypass authentication. Exploit code is publicly available, though active exploitation has not been confirmed.