This vulnerability allows an attacker to perform SQL injection by manipulating the ID parameter in the /users/application_status.php file of CodeAstro Online Job Portal 1.0. The vulnerability is remotely exploitable without any privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating medium severity with network attack vector, low complexity, and no required privileges or user interaction. No official fix or patch has been disclosed by the vendor, and the exploit code is publicly available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The impact is rated medium based on the CVSS score and the ability to exploit remotely without authentication. However, the exact scope of data exposure or system compromise is not detailed in the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the ID parameter in /users/application_status.php. Additionally, review and harden input validation and parameterized query usage in the affected application code if possible.