Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-77681: CodeAstro Online Job Portal allows anyone to upload files
CVE-2026-77681 · published 2 months ago
Summary
The update-profile feature of CodeAstro Online Job Portal version 1.0 lets a remote user upload files without restriction. This could let attackers place malicious files on your server, potentially compromising data or services. Apply the vendor's security update or disable the upload function and enforce strict file-type checks until a patch is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| codeastro | online job portal | 1.0 |
Original advisory text
CodeAstro Online Job Portal update-profile.php unrestricted upload
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-284Improper Access Control
CWE-434Unrestricted File Upload
Timeline
Published21 Aug 2026
Updated4 Nov 2026
First seen21 Aug 2026
Track software like this
Free during beta