CVE-2025-13286: itsourcecode Online Voting System ajax.php sql injection

Published Nov 17, 2025

Updated

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

itsourcecode Online Voting System=1.0

Angeljudesuarez Online Voting System=1.0

Event History

Nov 17, 2025

CVE Published

via MITRE·02:02 PM

Data Sourced

via MITRE·02:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Sep 9, 58737

Event

via NVD·10:34 PM

Frequently Asked Questions

What is the severity of CVE-2025-13286?

CVE-2025-13286 is classified as a critical vulnerability due to its potential for remote exploitation via SQL injection.

How do I fix CVE-2025-13286?

To fix CVE-2025-13286, it is recommended to update the itsourcecode Online Voting System to a version that addresses this SQL injection vulnerability.

What kind of attack is associated with CVE-2025-13286?

CVE-2025-13286 is associated with an SQL injection attack, which can be exploited by manipulating the argument ID in the /ajax.php file.

Can CVE-2025-13286 be exploited remotely?

Yes, CVE-2025-13286 can be exploited remotely, allowing attackers to perform unauthorized actions on the system.

Which version of the software is affected by CVE-2025-13286?

CVE-2025-13286 affects version 1.0 of the itsourcecode Online Voting System.