CVE-2025-10078

CRITICAL 9.8CVE-2025-10078 · Published 08/09/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
online polling system razormist	`= 1.0`	No fix yet

Description

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

References

ganzhi-qcy/cve · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
sourcecodester.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free