1 matches found
CVE-2025-10078: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be use...
9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
20