CVE-2025-10077 in Online Polling System

Resumen

por MITRE • 2025-09-08

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsable: VulDB
• Divulgación: 2025-09-08
• Moderación: aceptado
• Artículo: VDB-323025
• CPE: listo
• CWE: CWE-89 (confirmado)
• Explotación: Descargar
• CVSS: 9.8 (NVD)
• EPSS: 0.00412
• KEV: no
• Actividades: muy bajo
• Sector: Education

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10077
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10077
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10077/