Description
A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attack can be initiated remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Online Voting System | 1.0 | — |
References
- VDB-376162 | code-projects Online Voting System saveVote.php test_input sql injection vdb-entry technical-description
- VDB-376162 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-14649 | CVE Analysis and Report third-party-advisory
- Submit #846330 | code-projects Online Voting System in PHP 1.0 SQL Injection third-party-advisory
- https://gist.github.com/c4ttr4ck/a29b2238099fa07b4f072c21123b55ef related
- https://code-projects.org/ product