CVE-2026-7028 - Vulnerability Analysis

Overview

CodeAstro Online Job Portal 1.0 contains a sql injection caused by manipulation of the "ID" argument in /admin/jobs-admins/delete-jobs.php in All Jobs Page, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version.

References

• https://codeastro.com/
• https://github.com/Xmyronn/CodeAstro-Online-Job-Portal-SQLi-Delete-All.git
• https://vuldb.com/submit/797969
• https://vuldb.com/vuln/359608
• https://vuldb.com/vuln/359608/cti

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner