CNNVD-202511-1914 Information

CNNVD ID

CNNVD-202511-1914

CVE-2025-13285

  • CNNVD Published: 2025-11-17

Description (Chinese)

itsourcecode Online Voting System是itsourcecode开源的一个在线投票系统。 itsourcecode Online Voting System 1.0版本存在SQL注入漏洞,该漏洞源于对文件/login.php中参数Username的错误操作,可能导致SQL注入攻击。

Description (English)

Its sourcecode Online Voting System is an online voting system open to accesscode. Its sourcecode Online Voting System Version 1.0 contains an injection loophole in SQL, which results from an error in Username, the parameter in the file/login.php, which could lead to an attack on SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

itsourcecode

Published

2025-11-17

Last Modified

2026-02-24

References

https://github.com/WANGshuyan2025/cve/issues/6 https://vuldb.com/?id.332625 https://vuldb.com/?submit.690884 https://vuldb.com/?submit.690887 https://vuldb.com/?ctiid.332625 https://itsourcecode.com/ https://access.redhat.com/security/cve/cve-2025-13285

Share on: