CVE-2025-11101: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-11054: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-8469

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...

CVE-2024-8466

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/category/controller.php, and retrieve all the information stored in it...

CVE-2024-8465

SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...

CVE-2024-8465: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...

CVE-2024-8473: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...

PT-2024-39040

Name of the Vulnerable Software and Affected Versions: Jobportal versions affected versions not specified Description: A Cross-Site Scripting XSS issue exists due to insufficient encryption of user-controlled input. This could allow an attacker to retrieve the session details of an authenticated...

PT-2024-39033

Name of the Vulnerable Software and Affected Versions: Job Portal affected versions not specified Description: The issue allows an attacker to send a specially designed query through the CATEGORY parameter in the /jobportal/admin/category/controller.php endpoint, and retrieve all the information...

CVE-2024-8467: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...

CVE-2024-8470: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /jobportal/admin/vacancy/controller.php, and retrieve all the information stored in it...

CVE-2024-8469: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...