This vulnerability involves an SQL injection in CodeAstro Online Job Portal 1.0. Specifically, the issue is in an unknown function in the /admin/jobs-admins/delete-jobs.php file, where the ID parameter is not properly sanitized, allowing an attacker to inject SQL commands remotely. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, no privileges or user interaction required, and partial impact on confidentiality, integrity, and availability. No official remediation or patch is currently documented.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or deletion, potentially compromising the confidentiality, integrity, and availability of the affected system's data. However, the impact is rated medium due to partial impact metrics and no confirmed exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to implement input validation and parameterized queries on the affected parameter as a temporary mitigation. Monitor vendor channels for updates and apply patches promptly once available.