This vulnerability involves SQL injection in CodeAstro Online Job Portal 1.0, specifically in a function of the /admin/jobs-admins/delete-jobs.php file related to the All Jobs Page component. Manipulating the ID parameter enables an attacker to inject SQL commands remotely. The CVSS 4.0 base score is 5.1 (medium severity), reflecting network attack vector, low complexity, no user interaction, and partial impact on confidentiality, integrity, and availability. No vendor patch or official remediation level is currently documented.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, modification, or deletion. The impact is limited to the affected version 1.0 of the CodeAstro Online Job Portal. There are no confirmed active exploits in the wild, and the exploit code has been publicly released, increasing the risk of attempted attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected /admin/jobs-admins/delete-jobs.php endpoint, implement input validation or parameterized queries if possible, and monitor for suspicious activity related to this endpoint. Avoid relying on generic mitigations that are not directly applicable.