CVE-2026-86159: SourceCodester Online Voting System ajax.php save_user sql injection
Published Sep 6, 2026
·Updated
A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
1 affected component
SourceCodester Online Voting System=1.0
Event History
Sep 6, 2026
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue can be exploited remotely over the network. The supplied metrics indicate no privileges and no user interaction are required.
2
Which installations are identified as affected?
The affected product version identified in the available information is SourceCodester Online Voting System 1.0.
3
Is exploitation publicly available?
Yes. A published exploit is reported and may be used by attackers.