Approved changes feed: RSS · Atom

cpe:2.3:a:razormist:online_polling_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRazormist (4ef10641-c3df-5176-988f-8429f1efd174)
ProductOnline Polling System (47a48234-9052-5678-b551-194c2c824539)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9699 vulnerable 2026-06-03 15:14:39.328610 SourceCodester Online Polling System Code checklogin.php sql injection
HIGH (7.3)
A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now public and may be used.
Published: 2025-08-30T16:32:06.890Z
Updated: 2025-09-02T15:17:20.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10617 vulnerable 2026-06-03 14:58:34.453041 SourceCodester Online Polling System positions.php sql injection
MEDIUM (6.3)
A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-09-17T20:32:10.044Z
Updated: 2025-09-18T14:36:03.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10082 vulnerable 2026-06-03 14:58:33.509364 SourceCodester Online Polling System manage-admins.php sql injection
HIGH (7.3)
A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-09-08T04:02:06.109Z
Updated: 2025-09-08T16:13:02.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10078 vulnerable 2026-06-03 14:58:33.500328 SourceCodester Online Polling System candidates.php sql injection
HIGH (7.3)
A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Published: 2025-09-08T02:02:06.100Z
Updated: 2025-09-08T16:49:50.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10077 vulnerable 2026-06-03 14:58:33.499962 SourceCodester Online Polling System registeracc.php sql injection
HIGH (7.3)
A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-09-08T01:32:07.706Z
Updated: 2025-09-08T16:51:37.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10076 vulnerable 2026-06-03 14:58:33.499477 SourceCodester Online Polling System manage-profile.php sql injection
HIGH (7.3)
A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-09-08T01:02:07.399Z
Updated: 2025-09-08T16:54:38.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10075 vulnerable 2026-06-03 14:58:33.498997 SourceCodester Online Polling System manage-profile.php cross site scripting
LOW (3.5)
A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
Published: 2025-09-08T00:32:06.129Z
Updated: 2025-09-08T17:01:35.036Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.