{"id":"CVE-2026-6201","state":"PUBLISHED","title":"CodeAstro Online Job Portal Delete Job Posting job-delete.php access control","description":"A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit is publicly available and might be used.","publishedAt":"2026-04-13T19:00:18.544Z","updatedAt":"2026-04-16T13:26:40.778Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["CodeAstro Online Job Portal"],"affected":[{"vendor":"CodeAstro","product":"Online Job Portal","versions":[{"version":"1.0","status":"affected"}],"modules":["Delete Job Posting Handler"]}],"references":["https://vuldb.com/vuln/357123","https://vuldb.com/vuln/357123/cti","https://vuldb.com/submit/797515","https://github.com/Xmyronn/CodeAstro-Online-Job-Portal-IDOR.git","https://codeastro.com/"],"weaknesses":["CWE-284","CWE-266"],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/6xxx/CVE-2026-6201.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-6201","state":"PUBLISHED","datePublished":"2026-04-13T19:00:18.544Z","dateUpdated":"2026-04-16T13:26:40.778Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-04-13T08:50:36.262Z"},"containers":{"cna":{"title":"CodeAstro Online Job Portal Delete Job Posting job-delete.php access control","descriptions":[{"lang":"en","value":"A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit is publicly available and might be used."}],"affected":[{"vendor":"CodeAstro","product":"Online Job Portal","versions":[{"version":"1.0","status":"affected"}],"modules":["Delete Job Posting Handler"]}],"references":[{"url":"https://vuldb.com/vuln/357123","name":"VDB-357123 | CodeAstro Online Job Portal Delete Job Posting job-delete.php access control","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/357123/cti","name":"VDB-357123 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/797515","name":"Submit #797515 | CodeAstro Online Job Portal Project in PHP MySQL 1.0 Improper Access Controls","tags":["third-party-advisory"]},{"url":"https://github.com/Xmyronn/CodeAstro-Online-Job-Portal-IDOR.git","tags":["exploit"]},{"url":"https://codeastro.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.4,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.4,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5.5,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]},{"descriptions":[{"cweId":"CWE-266","type":"CWE","lang":"en","description":"Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-04-13T19:00:18.544Z"},"timeline":[{"time":"2026-04-13T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-04-13T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-04-13T10:55:41.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"imad alvi (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-6201","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-16T13:21:00.957059Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-16T13:26:40.778Z"}}]}}}