| tiêu đề | code-projects Online Job Portal System 1.0 SQL Injection |
|---|
| Mô tả | During a security review of "Online Job Portal System", a critical SQL injection vulnerability was discovered in the /login.php file. This vulnerability stems from insufficient user input validation of the txtUser and txtPass POST parameters, allowing attackers to inject malicious SQL queries into the authentication logic. The attacker can log into any account type (Administrator, Employer, JobSeeker) without valid credentials by appending SQL injection payloads to the login form. |
|---|
| Nguồn | ⚠️ https://github.com/shihuizhang-dazhi/MY-CVE/issues/5 |
|---|
| Người dùng | dazhi (UID 87857) |
|---|
| Đệ trình | 11/06/2026 12:52 (cách đây 1 tháng) |
|---|
| Kiểm duyệt | 13/07/2026 23:19 (1 month later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 376174 [code-projects Online Job Portal 1.0 login.php txtUser/txtPass Tiêm SQL] |
|---|
| điểm | 0 |
|---|