CVE-2025-11088: itsourcecode Open Source Job Portal index.php sql injection

Published Sep 27, 2025

Updated

A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

itsourcecode Open Source Job Portal

Angeljudesuarez Open Source Job Portal=1.0

Event History

Sep 27, 2025

CVE Published

via MITRE·11:32 PM

Data Sourced

via MITRE·11:32 PM

DescriptionSeverityWeakness

Sep 28, 2025

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11088?

CVE-2025-11088 has been classified as a high-severity vulnerability due to its potential for remote SQL injection exploitation.

How can I fix CVE-2025-11088?

To fix CVE-2025-11088, sanitize and validate all user inputs, particularly the ID parameter in the /admin/vacancy/index.php?view=edit page.

Who is affected by CVE-2025-11088?

CVE-2025-11088 affects users of the itsourcecode Open Source Job Portal version 1.0.

What type of vulnerability is CVE-2025-11088?

CVE-2025-11088 is a SQL injection vulnerability that allows remote attackers to manipulate database queries.

Is remote exploitation possible for CVE-2025-11088?

Yes, CVE-2025-11088 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.