EUVD-2025-21320Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Requires admin credentials (PR:L); SQL injection yields limited data impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/positions_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
SQL injection vulnerability in code-projects Voting System 1.0 allows remote authenticated attackers to manipulate the ID parameter in /admin/positions_edit.php, potentially leading to unauthorized data access or modification. A public exploit is available, but low CVSS score (2.1) and EPSS (0.04%) indicate limited real-world risk, and no active exploitation has been reported.
Technical ContextAI
The affected software is a PHP-based voting system using a backend database (likely MySQL). The vulnerability is a classic SQL injection due to improper sanitization of the 'ID' parameter in /admin/positions_edit.php. CWE-74 (Improper Neutralization of Special Elements) broadly covers injection flaws; here it specifically allows SQL commands to be passed to the database. The CPE identifies the product as voting_system version 1.0 by vendor fabian.
RemediationAI
No vendor-released patch or upgrade has been identified for this vulnerability. Since the Voting System appears to be a demo or educational project, users should consider migrating to a more secure alternative if the application is used in any production or sensitive environment. As compensating controls, implement a web application firewall (WAF) with SQL injection rules, restrict access to the /admin/ directory using network-layer controls, and disable the application if not needed. Manual code review and input sanitization (parameterized queries) would permanently fix the flaw.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
Share
External POC / Exploit Code
Leaving vuln.today