CVE-2025-13287: itsourcecode Online Voting System index.php sql injection
A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13287?
CVE-2025-13287 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-13287?
To fix CVE-2025-13287, ensure proper input validation and use prepared statements for database queries to prevent SQL injection.
What are the potential impacts of CVE-2025-13287?
Exploiting CVE-2025-13287 can lead to unauthorized access to the database, data manipulation, and extraction of sensitive information.
Who is affected by CVE-2025-13287?
CVE-2025-13287 affects users of itsourcecode Online Voting System version 1.0 specifically when using the /index.php?page=categories endpoint.
Can CVE-2025-13287 be exploited remotely?
Yes, CVE-2025-13287 can be exploited remotely, allowing attackers to perform SQL injection attacks without physical access to the system.