CVE-2026-6201 - Vulnerability Analysis

Overview

CodeAstro Online Job Portal 1.0 contains a broken access control vulnerability caused by improper validation of the "ID" argument in /jobs/job-delete.php, letting remote attackers delete job postings without authorization.

Severity & Score

Impact

Remote attackers can delete job postings without proper authorization, leading to data loss and unauthorized modifications.

Mitigation

Update to the latest version of CodeAstro Online Job Portal.

References

• https://codeastro.com/
• https://github.com/Xmyronn/CodeAstro-Online-Job-Portal-IDOR.git
• https://vuldb.com/submit/797515
• https://vuldb.com/vuln/357123
• https://vuldb.com/vuln/357123/cti

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner