CVE-2025-7581: code-projects Voting System positions_edit.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/positionsedit.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7581?
CVE-2025-7581 is classified as a critical vulnerability.
How does CVE-2025-7581 allow exploitation?
CVE-2025-7581 allows exploitation through SQL injection via manipulation of the ID argument in the file /admin/positions_edit.php.
Which software is affected by CVE-2025-7581?
CVE-2025-7581 affects the code-projects Voting System version 1.0.
What consequences can result from an exploit of CVE-2025-7581?
Exploiting CVE-2025-7581 can lead to unauthorized access to the database, allowing attackers to manipulate or exfiltrate sensitive data.
How do I fix CVE-2025-7581?
To fix CVE-2025-7581, you should validate and sanitize all user inputs to prevent SQL injection vulnerabilities.