CVE-2025-9699

CRITICAL 9.8CVE-2025-9699 · Published 30/08/2025 · updated 18/10/2026

Package	Affected versions	Patched versions
online polling system razormist	`= 1.0`	No fix yet

Description

A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now public and may be used.

References

ganzhi-qcy/cve · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
sourcecodester.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free