itsourcecode Open Source Job Portal SQL注入漏洞

2025-10-01 00:05:07 itsourcecode PoC No

Description

itsourcecode Open Source Job Portal是itsourcecode开源的一个企业门户站点。 itsourcecode Open Source Job Portal 1.0版本存在SQL注入漏洞，该漏洞源于对文件/admin/employee/index.php中参数ID的错误操作，可能导致SQL注入攻击。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://github.com/yihaofuweng/cve/issues/35
https://www.sentinelone.com/vulnerability-database/cve-2025-11101/
https://nvd.nist.gov/vuln/detail/CVE-2025-10834
https://dbugs.ptsecurity.com/vulnerability/PT-2025-39751
https://github.com/yihaofuweng/cve/issues/30
https://github.com/yihaofuweng/cve/issues/37
https://www.sentinelone.com/vulnerability-database/cve-2025-10834/
https://cve.imfht.com/detail/CVE-2025-11101?lang=en
https://github.com/advisories/GHSA-697c-9qwg-9j3w
https://nvd.nist.gov/vuln/detail/CVE-2025-11088

Description

PoC

References

Related Vulnerabilities