Is CVE-2026-15675 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15675 being exploited in the wild.

How severe is CVE-2026-15675?

High severity, with a CVSS score of 7.3, published 14 July 2026.

Is there a fix for CVE-2026-15675?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-15675 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-15675?

Check whether you run Code-Projects Online Job Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15675: code-projects Online Job Portal SQL injection in EditUser.php

CVE-2026-15675 · Severity: high · CVSS 7.3 · Published 2026-07-14

A vulnerability exists in the Online Job Portal 1.0, a web application used for managing job listings and user profiles. An attacker can exploit this flaw to gain unauthorized access to the underlying database, potentially exposing sensitive information such as user credentials, personal data, and administrative records. Because the affected component lacks proper security checks, an anonymous user on the internet could compromise the entire system's data without needing a login.

Technologies: Code-Projects Online Job Portal. Vendors: Code-Projects.

Quick answers

Is CVE-2026-15675 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15675 being exploited in the wild.
How severe is CVE-2026-15675?: High severity, with a CVSS score of 7.3, published 14 July 2026.
Which products and versions are affected?: Code-Projects Online Job Portal 1.0.
Is there a fix for CVE-2026-15675?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-15675 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-15675?: Check whether you run Code-Projects Online Job Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A UNION-based SQL injection vulnerability exists in code-projects Online Job Portal 1.0 within the '/Admin/EditUser.php' file. The root cause is the failure to sanitize the 'UserId' GET parameter before concatenating it into a SELECT query. Furthermore, the page lacks session-based authentication, allowing unauthenticated remote attackers to trigger the vulnerability. Since the application renders query results directly into HTML input fields, an attacker can use UNION SELECT statements to exfiltrate sensitive data, including plaintext passwords and administrative credentials, directly through the browser. There are currently no known patches for this version.

Affected products

code-projects Online Job Portal 1.0

Timeline

2026-06-11: disclosed: Vulnerability details and POC shared on GitHub
2026-07-14: advisory: NVD and VulDB published advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.