CVE-2025-10078: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be use...

SourceCodester Online Polling System: SQL Injection Vulnerability

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. SourceCodester Online Polling System version 1.0 suffers from a SQL injection vulnerability, which originates from improper handling of parameters in the /admin/candidates.php file, which may lead to...