CVE-2025-11078: itsourcecode Open Source Job Portal controller.php unrestricted upload

Published Sep 27, 2025

Updated

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Affected Software

2 affected components

itsourcecode Open Source Job Portal

Angeljudesuarez Open Source Job Portal=1.0

Event History

Sep 27, 2025

CVE Published

via MITRE·08:32 PM

Data Sourced

via MITRE·08:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11078?

CVE-2025-11078 has been assessed as a critical vulnerability due to its potential for unrestricted file upload.

How do I fix CVE-2025-11078?

To fix CVE-2025-11078, implement file type validation and restrict the upload functionality in the affected controller.

What are the consequences of exploiting CVE-2025-11078?

Exploiting CVE-2025-11078 can lead to unauthorized file uploads, potentially allowing attackers to execute malicious code on the server.

Which software versions are affected by CVE-2025-11078?

CVE-2025-11078 affects itsourcecode Open Source Job Portal version 1.0.

How can I detect if CVE-2025-11078 is present in my system?

You can detect CVE-2025-11078 by auditing the file upload functionalities in your application for unrestricted access on /admin/user/controller.php.