Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:online_job_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductOnline Job Portal (08023689-79d8-54d5-80f0-4811caac1f45)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7071 vulnerable 2026-06-03 15:27:56.150558 CodeAstro Online Job Portal user-cvs file information disclosure
MEDIUM (5.3)
A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file and directory information exposure. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2026-04-27T00:30:11.991Z
Updated: 2026-04-27T15:15:21.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7028 vulnerable 2026-06-03 15:27:56.062137 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection
MEDIUM (4.7)
A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-26T08:45:11.264Z
Updated: 2026-04-27T16:56:49.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6201 vulnerable 2026-06-03 15:27:54.889037 CodeAstro Online Job Portal Delete Job Posting job-delete.php access control
MEDIUM (5.4)
A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-04-13T19:00:18.544Z
Updated: 2026-04-16T13:26:40.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10261 vulnerable 2026-06-03 15:14:43.504660 CodeAstro Online Job Portal application_status.php sql injection
HIGH (7.3)
A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/application_status.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-06-01T13:30:09.230Z
Updated: 2026-06-01T15:23:04.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10260 vulnerable 2026-06-03 15:14:43.504364 CodeAstro Online Job Portal delete-jobs.php sql injection
HIGH (7.3)
A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /admin/jobs-admins/delete-jobs.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-06-01T13:15:07.555Z
Updated: 2026-06-01T15:03:32.348Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.