Lucene search
+L

22 matches found

NVD
NVD
•added 2025/11/23 5:15 p.m.•11 views

CVE-2025-13557

A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS0.00387EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/23 12:00 a.m.•1 views

CVE-2025-13557: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS5.5AI score0.00387EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/23 12:00 a.m.•0 views

CVE-2025-13556: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing a manipulation of the argument myusername can lead to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-26276

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00541EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-27105

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00415EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/17 8:32 p.m.•64 views

CVE-2025-10617

CVE-2025-10617 affects SourceCodester Online Polling System 1.0. The vulnerability is in the sensitive file /admin/positions.php , where manipulation of the ID argument leads to an SQL injection. The attack can be initiated remotely and, per sources, the exploit has been publicly released. Connec...

8.8CVSS6.7AI score0.00396EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•0 views

CVE-2025-10617: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made...

8.8CVSS5.6AI score0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/17 12:00 a.m.•27 views

PT-2025-38276

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A weakness exists in SourceCodester Online Polling System 1.0 related to SQL injection within the /admin/positions.php file. Manipulation of the ID argument can trigger this issue,...

6.5CVSS6.6AI score0.00396EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2025/09/10 4:26 a.m.•16 views

CVE-2025-10082

A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and m...

9.8CVSS7.3AI score0.00415EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•11 views

PT-2025-36425

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A security issue exists in SourceCodester Online Polling System 1.0. Manipulation of the email argument in the /registeracc.php file may lead to SQL injection. The attack can be...

9.8CVSS7.3AI score0.00412EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•1 views

CVE-2025-10075: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been...

5.4CVSS4AI score0.00245EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•17 views

PT-2025-36424

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A SQL injection weakness exists in SourceCodester Online Polling System 1.0. The issue affects an unknown function within the /manage-profile.php file. Manipulation of the email...

9.8CVSS7.4AI score0.00412EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•15 views

PT-2025-36423

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System version 1.0 Description: A security flaw exists in SourceCodester Online Polling System 1.0. The issue is related to cross site scripting, triggered by manipulating the firstname argument of an unknown...

5.4CVSS4.4AI score0.00245EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•0 views

CVE-2025-10076: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...

9.8CVSS5.6AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•0 views

CVE-2025-10082: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and m...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/08 12:00 a.m.•13 views

SourceCodester Online Polling System Code 代码注入漏洞

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. A code injection vulnerability exists in SourceCodester Online Polling System Code version 1.0, which stems from improper handling of parameters in the /manage-profile.php file, and could lead to...

5.4CVSS4.9AI score0.00245EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•0 views

CVE-2025-10077: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and m...

9.8CVSS5.5AI score0.00412EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•0 views

CVE-2025-10078: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be use...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/30 12:00 a.m.•1 views

CVE-2025-9699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now...

9.8CVSS5.7AI score0.00541EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/07/16 12:00 a.m.•6 views

Online Polling System Authentication Bypass SQL Injection Vulnerability

Online Polling System is an online voting system. A security vulnerability exists in Online Polling System. The vulnerability stems from a database application that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands...

7.6AI score
SaveExploits0References1
Rows per page
Query Builder