CVE-2025-11101: itsourcecode Open Source Job Portal index.php sql injection

Published Sep 28, 2025

Updated

A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

itsourcecode Open Source Job Portal

Angeljudesuarez Open Source Job Portal=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·07:02 AM

Data Sourced

via MITRE·07:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11101?

CVE-2025-11101 has been identified as a critical vulnerability due to its potential for remote SQL injection.

How do I fix CVE-2025-11101?

To fix CVE-2025-11101, sanitize and validate all inputs, especially the ID parameter used in the /jobportal/admin/company/index.php?view=edit function.

What type of vulnerability is CVE-2025-11101?

CVE-2025-11101 is classified as a SQL injection vulnerability.

Which software is affected by CVE-2025-11101?

CVE-2025-11101 affects the itsourcecode Open Source Job Portal version 1.0.

Can CVE-2025-11101 be exploited remotely?

Yes, CVE-2025-11101 can be exploited remotely by manipulating the ID parameter.