CVE-2026-7028

MEDIUM

CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

Title source: cna
STIX 2.1

Description

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Exploits (1)

nomisec WRITEUP
by Xmyronn · poc
https://github.com/Xmyronn/CVE-2026-7028-SQLI

References (5)

Scores

CVSS v3 4.7
EPSS 0.0001
EPSS Percentile 0.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
CodeAstro/Online Job Portal 1.0
Published Apr 26, 2026
Tracked Since Apr 26, 2026