CNNVD-202509-1121 Information
Sep 08, 2025
cve
CNNVD ID
CNNVD-202509-1121
Related CVE
- CNNVD Published: 2025-09-08
Description (Chinese)
SourceCodester Online Polling System Code是SourceCodester开源的一个在线投票系统。 SourceCodester Online Polling System Code 1.0版本存在代码注入漏洞，该漏洞源于/manage-profile.php文件参数处理不当，可能导致跨站脚本攻击。
Description (English)
ServiceCode is an online voting system open to ServiceCodester. SourceCodester Online Polling System Code 1.0 has a code-injection loophole, which stems from/manage-profile.php-file parameters being improperly processed and may lead to cross-site script attacks.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
SourceCodester
Published
2025-09-08
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.323023 https://github.com/ganzhi-qcy/cve/issues/18 https://www.sourcecodester.com/ https://vuldb.com/?id.323023 https://vuldb.com/?submit.644503 https://access.redhat.com/security/cve/cve-2025-10075
Share on: