CVE-2025-7558: code-projects Voting System positions_add.php sql injection
A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positionsadd.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7558?
CVE-2025-7558 is classified as a critical vulnerability.
How do I fix CVE-2025-7558?
To fix CVE-2025-7558, sanitize and validate the input for the 'description' argument in /admin/positions_add.php to prevent SQL injection.
What are the potential impacts of CVE-2025-7558?
Exploitation of CVE-2025-7558 may allow an attacker to execute arbitrary SQL commands remotely.
Which versions of the Voting System are affected by CVE-2025-7558?
CVE-2025-7558 affects Code-projects Voting System version 1.0.
Where is the vulnerable file located for CVE-2025-7558?
The vulnerable file for CVE-2025-7558 is located at /admin/positions_add.php.