This vulnerability involves an SQL injection flaw in CodeAstro Online Job Portal 1.0, specifically in the /admin/jobs-admins/delete-jobs.php file's unknown function related to the All Jobs Page component. Attackers can remotely manipulate the ID parameter to inject SQL commands. The vulnerability has a CVSS 4.0 base score of 5.1, indicating medium severity with network attack vector, low complexity, and no user interaction required. No vendor advisory or patch information is available at this time.

Successful exploitation could allow an attacker with high privileges to execute arbitrary SQL commands on the backend database remotely by manipulating the ID parameter. This could lead to unauthorized data access or modification. However, the impact is rated medium severity and the vulnerability requires high privileges, limiting the scope of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected functionality to trusted users only and consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the ID parameter in /admin/jobs-admins/delete-jobs.php.