CVE-2025-10834: itsourcecode Open Source Job Portal login.php sql injection
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10834?
CVE-2025-10834 is classified as a critical vulnerability due to its potential for SQL injection and remote exploitation.
How do I fix CVE-2025-10834?
To fix CVE-2025-10834, you should sanitize and validate all user input, particularly the user_email parameter in the login.php file.
Who is affected by CVE-2025-10834?
CVE-2025-10834 affects users of the itsourcecode Open Source Job Portal version 1.0.
How can CVE-2025-10834 be exploited?
CVE-2025-10834 can be exploited by sending crafted input to the user_email parameter that triggers a SQL injection in the login.php script.
Is the exploit for CVE-2025-10834 publicly available?
Yes, the exploit for CVE-2025-10834 is publicly available, making it essential to take prompt action to mitigate the risk.