CVE-2026-75986
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A SQL injection vulnerability was found in code-projects Online Job Portal System 1.0 in the Password Recovery component, in the /ForPass.php file. Manipulation of the txtUserName argument allows SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed.
Risk Assessment
An attacker could gain unauthorized access to the database, steal user data, or modify system content, posing a serious threat to data confidentiality and integrity.
Recommendation
Immediately apply vendor patches or implement input validation and parameterized queries to prevent SQL injection.
Original NVD description (English source)
A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.