← Database

CVE-2025-10078

HIGH CVSS: 7.3 Published: 2025-09-08 Modified: 2026-06-17

Description

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Platforms

Razormist Online Polling System

Weakness Type

CWE-74, CWE-89, CWE-89

References