Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2025-10617

SourceCodester Online Polling System positions.php sql injection

A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System
CVE-2025-10078

SourceCodester Online Polling System candidates.php sql injection

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System
CVE-2025-10082

SourceCodester Online Polling System manage-admins.php sql injection

A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System
CVE-2025-10077

SourceCodester Online Polling System registeracc.php sql injection

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System
CVE-2025-10076

SourceCodester Online Polling System manage-profile.php sql injection

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System
CVE-2025-10075

SourceCodester Online Polling System manage-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System
CVE-2025-9699

SourceCodester Online Polling System Code checklogin.php sql injection

A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now public and may be used.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Razormist Sourcecodester
Products
Online Polling System Online Polling System