Threats tagged 'ghsa-485v-639h-vm9r'

CVE-2025-12928 is a SQL injection vulnerability in code-projects Online Job Search Engine 1.0 affecting the /login.php file. The flaw arises from manipulation of the username or phone argument, allowing remote attackers to execute unauthorized SQL commands. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity score of 7.3 CVSS v3.1.