Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-7071-access-Control — Proof of concept demonstrating unauthenticated access to user resumes via directory listing in CodeAstro Online Job Portal, with reproduction steps and remediation guidance. | Kitploit
Tools/GitHubGitHub/xmyronn/cve-2026-7071-access-control
Vulnerability AnalysisExploitationInformation GatheringWeb SecurityPenetration Testing
GitHubxmyronn/cve-2026-7071-access-control

CVE-2026-7071-access-Control

Proof of concept demonstrating unauthenticated access to user resumes via directory listing in CodeAstro Online Job Portal, with reproduction steps and remediation guidance.

View Repository
176 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Unauthenticated Resume Exposure in CodeAstro Online Job Portal (PHP MySQL)

Details

  • Vendor: CodeAstro
  • Product: Online Job Portal Project in PHP MySQL
  • Version: 1.0
  • Vulnerability Type: Improper Access Control / Information Disclosure
  • CWE: CWE-284, CWE-200, CWE-548
  • Affected Endpoint: /users/user-cvs/
  • Impact: Unauthenticated access to all user resumes

Description

The application stores user resumes in a publicly accessible directory (/users/user-cvs/) without enforcing authentication or authorization checks.

An unauthenticated attacker can directly access and download any user's resume by requesting the file URL.

Additionally, directory listing is enabled on this directory, allowing attackers to enumerate all uploaded resumes without needing to guess filenames.

Proof of Concept

Step 1: Access Directory Listing

GET /online-job-portal-php-mysql/users/user-cvs/ HTTP/1.1 Host: target

Result:
A list of all uploaded resume files is displayed. Screenshot 2026-04-08 025624

Step 2: Download a Resume Without Authentication

GET /online-job-portal-php-mysql/users/user-cvs/cv_1757475245_DummyCV.pdf HTTP/1.1 Host: target

Step 3: No Authentication Required

  • Request works without login
  • No session cookies required
  • Any user or attacker can access files directly

Impact

An attacker can access and download all user resumes, which may contain sensitive personal information such as:

  • Full names
  • Email addresses
  • Phone numbers
  • Work experience

This can lead to privacy violations, data harvesting, and potential identity theft.

Vulnerable Code (Conceptual)

The application directly exposes files from a public directory without validating user permissions before access.

Recommendation

  • Restrict access to the /users/user-cvs/ directory
  • Disable directory listing on the server
  • Implement proper authentication and authorization checks before serving files
  • Store sensitive files outside the web root and serve them via controlled endpoints

Author

  • Imad Alvi

References

https://codeastro.com/online-job-portal-project-in-php-mysql-with-source-code/

Download Tool