CVE-2025-11041: itsourcecode Open Source Job Portal index.php sql injection

Published Sep 26, 2025

Updated

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

itsourcecode Open Source Job Portal

Angeljudesuarez Open Source Job Portal=1.0

Event History

Sep 26, 2025

CVE Published

via MITRE·08:02 PM

Data Sourced

via MITRE·08:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11041?

CVE-2025-11041 has been classified with a significant severity due to the potential for remote SQL injection.

How do I fix CVE-2025-11041?

To fix CVE-2025-11041, you should validate and sanitize user inputs on the /admin/user/index.php?view=edit endpoint to prevent SQL injection.

Which software versions are affected by CVE-2025-11041?

CVE-2025-11041 specifically affects version 1.0 of the itsourcecode Open Source Job Portal.

Can CVE-2025-11041 be exploited remotely?

Yes, CVE-2025-11041 can be exploited remotely by manipulating the ID parameter in the affected script.

What attack vector does CVE-2025-11041 utilize?

CVE-2025-11041 utilizes SQL injection as its attack vector through the /admin/user/index.php?view=edit functionality.