CVE-2025-12238: code-projects Automated Voting System user.php sql injection

Published Oct 27, 2025

Updated

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Code-projects Automated Voting System

Fabian Automated Voting System=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·06:32 AM

Data Sourced

via MITRE·06:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12238?

CVE-2025-12238 is classified as a high-severity vulnerability due to its potential for remote exploitation via SQL injection.

How do I fix CVE-2025-12238?

To fix CVE-2025-12238, validate and sanitize user input in the /admin/user.php file to prevent SQL injection.

What is the impact of CVE-2025-12238?

The impact of CVE-2025-12238 includes the possibility of unauthorized data access, manipulation, or exposure through SQL injection attacks.

Is CVE-2025-12238 remotely exploitable?

Yes, CVE-2025-12238 is remotely exploitable, allowing attackers to exploit the vulnerability from an external network.

Which version of Automated Voting System is affected by CVE-2025-12238?

CVE-2025-12238 affects the Automated Voting System version 1.0.