CodeAstro Online Job Portal vulnerabilities

A vulnerability was identified in CodeAstro Online Job Portal 1.0 in the file /users/update-profile.php. Manipulation of the Name argument leads to unrestricted upload. The attack can be initiated remotely, and the exploit is publicly available.

A SQL injection vulnerability was found in CodeAstro Online Job Portal 1.0 in the file /users/application_status.php. Manipulating the ID argument can lead to unauthorized database access. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability was found in CodeAstro Online Job Portal 1.0 in the file /admin/jobs-admins/delete-jobs.php. Manipulating the ID argument can lead to unauthorized database access. The attack can be performed remotely and the exploit is publicly available.

In CodeAstro Online Job Portal 1.0, an unknown functionality of /users/user-cvs/ leads to file and directory information exposure. Remote exploitation is possible and the exploit has been publicly disclosed.

In CodeAstro Online Job Portal 1.0, manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php leads to SQL injection. The attack can be carried out remotely and a public exploit has been released.

A vulnerability was identified in CodeAstro Online Job Portal 1.0 in an unknown function of /jobs/job-delete.php within the Delete Job Posting Handler component. Manipulation of the ID argument leads to improper access controls, and the attack can be launched remotely.