CVE-2025-6352
code-projects Automated Voting System Backend vote.php direct request
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jun 20, 2025
- Updated
- Jun 23, 2025
- Reserved
- Jun 19, 2025
Description
A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-425 Direct Request
Affected Products
| Product | Versions |
|---|---|
Automated Voting Systemcode-projects |
|
References
- VDB-313344 | code-projects Automated Voting System Backend vote.php direct requestvdb-entry
- VDB-313344 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #597239 | code-projects Automated Voting System 1.0 Exposure of Access Control List Files to an Unauthorized Controlthird-party-advisory
- https://github.com/asd1238525/cve/blob/main/Unauthorized.mdexploit
- https://code-projects.org/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.