CVE-2025-11078 | itsourcecode Open Source Job Portal 1.0 controller.php?action=photos photo unrestricted upload

A vulnerability, which was classified as critical, has been found in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2025-11078. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More