CVE-2025-10617

CVE-2025-10617 affects SourceCodester Online Polling System 1.0. The vulnerability is in the sensitive file /admin/positions.php , where manipulation of the ID argument leads to an SQL injection. The attack can be initiated remotely and, per sources, the exploit has been publicly released. Connec...

CVE-2025-10076

CVE-2025-10076 affects SourceCodester Online Polling System 1.0. The vulnerability exists in the /manage-profile.php file where manipulation of the email parameter enables SQL injection. The issue can be exploited remotely and the exploit has circulated publicly. Impact is described as confidenti...

CVE-2025-10075

SourceCodester Online Polling System 1.0 contains a cross-site scripting (XSS) flaw in /manage-profile.php triggered by manipulating the firstname parameter. The vulnerability can be exploited remotely and exploits have been released publicly. Multiple sources (NVD, Red Hat, CNNVD, PT-Security, a...

CVE-2025-10082

CVE-2025-10082 affects SourceCodester Online Polling System 1.0. The vulnerability resides in /admin/manage-admins.php, where manipulation of the email parameter leads to SQL injection. Exploitation can be performed remotely and public disclosures exist. Multiple connected sources confirm the iss...

CVE-2025-10077

CVE-2025-10077 affects SourceCodester Online Polling System 1.0; vulnerable in /registeracc.php via manipulations of the email parameter, enabling SQL injection. Exploitation may be remote and has been publicly disclosed. Remediation guidance in related PTSecurity advisory suggests restricting ac...

CVE-2025-10078

SourceCodester Online Polling System 1.0 has a SQL injection in /admin/candidates.php via manipulated ID parameter. Root cause: improper handling of the ID value enables arbitrary SQL execution. Impact: remote exploitation possible with no authentication, potentially exposing or altering data (hi...

CVE-2025-9699

The CVE-2025-9699 entry concerns SourceCodester Online Polling System Code 1.0. A vulnerability exists in the file /admin/checklogin.php where manipulating the myusername parameter enables SQL injection. This is a remote exploit with public tooling/occurrence reported. Affected software is descri...