CVE-2025-10077 in Online Polling System

Riassunto

di MITRE • 08/09/2025

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 08/09/2025
• Moderazione: accettato
• Voce: VDB-323025
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00379
• KEV: no
• Attività: molto basso
• Settore: Education

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10077
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10077
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10077/