GCVE - cpe:2.3:a:itsourcecode:online_voting_system:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:online_voting_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Itsourcecode (`14c06684-839a-5802-ab2e-bd37208c001a`)
Product	Online Voting System (`6d866c2f-c794-556f-ad27-0f90a57d7288`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-13287`	vulnerable	2026-06-08 07:04:31.918399	itsourcecode Online Voting System index.php sql injection MEDIUM (6.3) A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Published: 2025-11-17T14:32:08.254Z Updated: 2025-11-17T14:42:36.230Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332627 https://vuldb.com/?ctiid.332627 https://vuldb.com/?submit.690889 https://vuldb.com/?submit.690891 https://github.com/WANGshuyan2025/cve/issues/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13286`	vulnerable	2026-06-08 07:04:31.918008	itsourcecode Online Voting System ajax.php sql injection MEDIUM (6.3) A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Published: 2025-11-17T14:02:06.736Z Updated: 2025-11-17T16:51:27.163Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332626 https://vuldb.com/?ctiid.332626 https://vuldb.com/?submit.690888 https://github.com/WANGshuyan2025/cve/issues/8 https://itsourcecode.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13285`	vulnerable	2026-06-08 07:04:31.917609	itsourcecode Online Voting System login.php sql injection HIGH (7.3) A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. Published: 2025-11-17T13:32:06.771Z Updated: 2025-11-17T13:52:10.965Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332625 https://vuldb.com/?ctiid.332625 https://vuldb.com/?submit.690884 https://vuldb.com/?submit.690887 https://github.com/WANGshuyan2025/cve/issues/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13061`	vulnerable	2026-06-08 07:04:31.507316	itsourcecode Online Voting System index.php unrestricted upload MEDIUM (6.3) A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used. Published: 2025-11-12T20:32:07.008Z Updated: 2025-11-14T16:54:35.124Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332188 https://vuldb.com/?ctiid.332188 https://vuldb.com/?submit.682587 https://github.com/yihaofuweng/cve/issues/55 https://itsourcecode.com/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.