CVE-2026-15677

EUVD-2026-43630
A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
code-projectsonline_job_portal
1.0
CNA
Common Weakness Enumeration
References
https://code-projects.org/
https://github.com/shihuizhang-dazhi/MY-CVE/issues/6
https://vuldb.com/cve/CVE-2026-15677
https://vuldb.com/submit/855977
https://vuldb.com/vuln/378167
https://vuldb.com/vuln/378167/cti