This vulnerability in code-projects Online Job Portal System 1.0 involves SQL injection via the txtUserName parameter in the /ForPass.php file's Password Recovery component. An attacker can remotely manipulate this input to inject SQL commands, potentially compromising the backend database. The vulnerability has been publicly disclosed, indicating that exploit code or detailed methods may be available. There is no vendor advisory or patch information provided, and the remediation level is unknown.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The CVSS 4.0 base score is 6.9 (medium), reflecting network attack vector, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the Password Recovery functionality or implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the txtUserName parameter.