A vulnerability, which was classified as critical, has been found in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection.
This vulnerability is reported as CVE-2025-12928. The attack is possible to be carried out remotely. Moreover, an exploit is present.
