Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:open_source_job_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductOpen Source Job Portal (abbf54f8-503d-5884-9dfe-c9603dfba17d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11101 vulnerable 2026-06-08 07:02:28.057270 itsourcecode Open Source Job Portal index.php sql injection
HIGH (7.3)
A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-28T07:02:05.579Z
Updated: 2025-09-29T19:41:10.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11090 vulnerable 2026-06-08 07:02:28.034366 itsourcecode Open Source Job Portal index.php sql injection
MEDIUM (6.3)
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-09-28T01:02:06.772Z
Updated: 2025-09-29T14:49:54.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11088 vulnerable 2026-06-08 07:02:28.033410 itsourcecode Open Source Job Portal index.php sql injection
MEDIUM (6.3)
A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Published: 2025-09-27T23:32:06.326Z
Updated: 2025-09-29T14:51:53.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11078 vulnerable 2026-06-08 07:02:28.016720 itsourcecode Open Source Job Portal controller.php unrestricted upload
MEDIUM (6.3)
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Published: 2025-09-27T20:32:06.531Z
Updated: 2025-09-29T19:34:20.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11054 vulnerable 2026-06-08 07:02:27.986003 itsourcecode Open Source Job Portal index.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-09-27T09:32:06.736Z
Updated: 2025-09-29T19:15:07.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11041 vulnerable 2026-06-08 07:02:27.967576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10834 vulnerable 2026-06-08 07:02:27.582526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.