Janobe Engineers Online Portal vulnerabilities

3 CVEs affecting Janobe Engineers Online Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-36236, published 2026-04-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0182, published 2024-01-01. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ of the component Admin…
CVE-2026-36236, published 2026-04-10. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.
CVE-2023-7160, published 2023-12-29. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler.…