https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-11101.htmlhttps://patchthecve.com/cve/CVE-2025-11101.htmlFri, 09 Oct 2026 10:10:00 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been rhttps://patchthecve.com/cve/CVE-2025-11090.htmlhttps://patchthecve.com/cve/CVE-2025-11090.htmlFri, 09 Oct 2026 10:10:00 +0000MEDIUM 6.3: A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might behttps://patchthecve.com/cve/CVE-2025-11088.htmlhttps://patchthecve.com/cve/CVE-2025-11088.htmlFri, 09 Oct 2026 10:10:00 +0000MEDIUM 6.3: A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to https://patchthecve.com/cve/CVE-2025-11078.htmlhttps://patchthecve.com/cve/CVE-2025-11078.htmlFri, 09 Oct 2026 10:10:00 +0000MEDIUM 6.3: A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out rehttps://patchthecve.com/cve/CVE-2025-11054.htmlhttps://patchthecve.com/cve/CVE-2025-11054.htmlFri, 09 Oct 2026 10:10:00 +0000MEDIUM 6.3: A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-11041.htmlhttps://patchthecve.com/cve/CVE-2025-11041.htmlFri, 09 Oct 2026 10:10:00 +0000MEDIUM 6.3: A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has https://patchthecve.com/cve/CVE-2025-10834.htmlhttps://patchthecve.com/cve/CVE-2025-10834.htmlSun, 11 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument user_email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and