Lucene search
K

2155 matches found

NVD
NVD
added 2025/09/27 9:15 p.m.3 views

CVE-2025-11078

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

8.8CVSS0.00295EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/09/27 8:32 p.m.9 views

CVE-2025-11078 itsourcecode Open Source Job Portal controller.php unrestricted upload

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

6.5CVSS0.00295EPSS
Exploits1References5
CVE
CVE
added 2025/09/27 8:32 p.m.15 views

CVE-2025-11078

The CVE-2025-11078 pertains to itsourcecode Open Source Job Portal 1.0. Affected component is the file /admin/user/controller.php?action=photos, where manipulating the photo parameter enables unrestricted file uploads. This vulnerability is remotely exploitable and a public exploit exists. Connec...

8.8CVSS6.5AI score0.00295EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/27 9:32 a.m.9 views

CVE-2025-11054 itsourcecode Open Source Job Portal index.php sql injection

A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00343EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/27 9:32 a.m.4 views

CVE-2025-11054 itsourcecode Open Source Job Portal index.php sql injection

A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.7AI score0.00343EPSS
Exploits1References5
CVE
CVE
added 2025/09/27 9:32 a.m.12 views

CVE-2025-11054

The CVE-2025-11054 entry affects itsourcecode Open Source Job Portal 1.0. A SQL injection vulnerability exists in the admin path /jobportal/admin/category/index.php?view=edit caused by manipulation of the ID parameter. The vulnerability is exploitable remotely and, according to the sources, the e...

8.8CVSS6.7AI score0.00343EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/27 12:0 a.m.4 views

PT-2025-39745

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal 1.0 that allows for unrestricted file uploads. This is due to the manipulation of the photo argument within the file...

6.5CVSS6.2AI score0.00295EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/09/27 12:0 a.m.2 views

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which stems from incorrect manipulation of the parameter ID in the file /jobportal/admin/category/index.php, which coul...

8.8CVSS6.8AI score0.00343EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/09/27 12:0 a.m.1 views

itsourcecode Open Source Job Portal 代码问题漏洞

itsourcecode Open Source Job Portal is an enterprise portal site of itsourcecode open source. A code issue vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from an incorrect manipulation of the parameter photo in the file /admin/user/controller.php, which...

8.8CVSS6.5AI score0.00295EPSS
Exploits1References6
OSV
OSV
added 2025/09/26 8:15 p.m.4 views

CVE-2025-11038

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available t...

8.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/09/26 8:15 p.m.5 views

CVE-2025-11038

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available t...

8.8CVSS0.00306EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/09/26 8:2 p.m.10 views

CVE-2025-11041 itsourcecode Open Source Job Portal index.php sql injection

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

6.5CVSS0.00301EPSS
Exploits1References5
CVE
CVE
added 2025/09/26 8:2 p.m.13 views

CVE-2025-11041

CVE-2025-11041 affects itsourcecode Open Source Job Portal 1.0. The vulnerability is in the admin file /admin/user/index.php?view=edit, where manipulation of the ID parameter leads to SQL injection. Exploitation is remote and the vulnerability has been publicly disclosed. Connected documents repo...

8.8CVSS6.8AI score0.00301EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/26 7:32 p.m.4 views

CVE-2025-11038 itsourcecode Online Clinic Management System details.php sql injection

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available t...

6.5CVSS6.7AI score0.00306EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.3 views

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source an enterprise portal site . A SQL injection vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from incorrect manipulation of the parameter ID in the file /admin/user/index.php, which could lead t...

8.8CVSS6.8AI score0.00301EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.3 views

PT-2025-39683

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal that allows for remote SQL injection. The issue is located in the file /admin/user/index.php?view=edit. Manipulation of the ID...

6.5CVSS6.5AI score0.00301EPSS
Exploits1References10
Cvelist
Cvelist
added 2025/09/23 3:2 a.m.9 views

CVE-2025-10834 itsourcecode Open Source Job Portal login.php sql injection

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...

7.5CVSS0.00387EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.2 views

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which originates from a misuse of the parameter useremail in the file /jobportal/admin/login.php, which could lead to a...

9.8CVSS7.7AI score0.00387EPSS
Exploits1References5
OSV
OSV
added 2025/09/22 2:15 p.m.2 views

CVE-2025-10800

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

9.8CVSS5.8AI score0.00441EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/09/22 1:32 p.m.8 views

CVE-2025-10800 itsourcecode Online Discussion Forum index.php sql injection

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

7.5CVSS0.00441EPSS
Exploits1References7
Rows per page
Query Builder