6 matches found
CVE-2025-11054 itsourcecode Open Source Job Portal index.php sql injection
A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...
PT-2025-39721
Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A security issue exists in itsourcecode Open Source Job Portal 1.0. Manipulation of the ID argument in the file /jobportal/admin/category/index.php?view=edit can lead to SQL injection...
CVE-2022-31337
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...
Cross site request forgery (csrf)
CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request...
CVE-2019-9660
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...
Cross site scripting
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...