CVE-2026-86162

SourceCodester Online Voting System 1.0 contains a SQL injection vulnerability in the file /ajax.php?action=login. The Username argument is not properly sanitized, allowing a remote, unauthenticated attacker to manipulate database queries. The vulnerability carries a CVSS 3.1 base score of 7.3 (H...

PT-2026-86467

A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete voting. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...