CVE-2026-7028: CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection
A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7028?
CVE-2026-7028 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2026-7028?
To fix CVE-2026-7028, validate and sanitize all user inputs in the delete-jobs.php file and implement prepared statements for database queries.
Which software versions are affected by CVE-2026-7028?
CVE-2026-7028 affects version 1.0 of the CodeAstro Online Job Portal.
What is the impact of CVE-2026-7028?
The impact of CVE-2026-7028 could allow an attacker to delete jobs from the database through SQL injection.
Is there a workaround for CVE-2026-7028?
A temporary workaround for CVE-2026-7028 may include disabling the job deletion functionality until a patch is applied.