Approved changes feed: RSS · Atom

cpe:2.3:a:angeljudesuarez:online_voting_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorAngeljudesuarez (da54a5a8-16d8-5d98-ae37-5a80108a9da9)
ProductOnline Voting System (c6b32244-de8c-5972-9a9d-59857b4e2525)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13287 vulnerable 2026-06-03 14:58:45.824677 itsourcecode Online Voting System index.php sql injection
MEDIUM (6.3)
A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-11-17T14:32:08.254Z
Updated: 2025-11-17T14:42:36.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13286 vulnerable 2026-06-03 14:58:45.824126 itsourcecode Online Voting System ajax.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
Published: 2025-11-17T14:02:06.736Z
Updated: 2025-11-17T16:51:27.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13285 vulnerable 2026-06-03 14:58:45.823568 itsourcecode Online Voting System login.php sql injection
HIGH (7.3)
A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2025-11-17T13:32:06.771Z
Updated: 2025-11-17T13:52:10.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13061 vulnerable 2026-06-03 14:58:45.464308 itsourcecode Online Voting System index.php unrestricted upload
MEDIUM (6.3)
A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2025-11-12T20:32:07.008Z
Updated: 2025-11-14T16:54:35.124Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.