CVE-2025-12928: code-projects Online Job Search Engine login.php sql injection

Published Nov 10, 2025

Updated

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected Software

2 affected components

Code-projects Online Job Search Engine

Fabian Online Job Search Engine=1.0

Event History

Nov 10, 2025

CVE Published

via MITRE·03:02 AM

Data Sourced

via MITRE·03:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeaknessAffected Software

Sep 10, 58737

Event

via NVD·06:09 AM

Frequently Asked Questions

What is the severity of CVE-2025-12928?

CVE-2025-12928 is a critical vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-12928?

To fix CVE-2025-12928, validate and sanitize user inputs in the /login.php file to prevent SQL injection.

What systems are affected by CVE-2025-12928?

CVE-2025-12928 affects code-projects Online Job Search Engine version 1.0.

Can CVE-2025-12928 be exploited remotely?

Yes, CVE-2025-12928 can be exploited remotely by manipulating the username or phone argument.

What actions should be taken if CVE-2025-12928 is detected?

If CVE-2025-12928 is detected, it is crucial to immediately patch the software and review logs for any unauthorized access.