CVE-2026-14660: code-projects Online Job Portal login.php sql injection
A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14660?
CVE-2026-14660 has a high severity rating of 7.3.
How do I fix CVE-2026-14660?
To fix CVE-2026-14660, ensure that user inputs for txtUser and txtPass are properly sanitized and validated to prevent SQL injection.
What type of vulnerability is CVE-2026-14660?
CVE-2026-14660 is a SQL Injection vulnerability found in the login.php file of the Code-projects Online Job Portal.
Can CVE-2026-14660 be exploited remotely?
Yes, CVE-2026-14660 can be exploited remotely by manipulating the arguments txtUser and txtPass.
What could be the impact of exploiting CVE-2026-14660?
Exploiting CVE-2026-14660 could lead to unauthorized access to the database, allowing attackers to view, modify, or delete data.