CVE Alert: CVE-2025-9699 – SourceCodester – Online Polling System Code
CVE-2025-9699
HIGHNo exploitation known
A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The exploit is now public and may be used.
CVSS v3.1 (7.3)
Vendor
SourceCodester
Product
Online Polling System Code
Versions
1.0
CWE
CWE-89, SQL Injection
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Published
2025-08-30T16:32:06.890Z
Updated
2025-08-30T16:32:06.890Z
References
AI Summary Analysis
Risk verdict
Why this matters
Most likely attack path
Who is most exposed
Detection ideas
- Unusual login attempts or credential-stuffing patterns targeting the admin path.
- Database error messages or abnormal responses surfacing from checklogin.php.
- Web logs showing repeated SQL-like input in the myusername parameter.
- WAF/IDS alerts for SQL injection payloads against the admin login URL.
- Sudden spikes in data dump or read-only queries originating from login attempts.
Mitigation and prioritisation
- Apply the vendor patch or upgrade to a fixed release; if unavailable, implement strong input handling and parameterised queries immediately.
- Apply web application firewall rules to block SQL injection patterns on /admin/checklogin.php; enable input validation at server level.
- Restrict access to the admin login page by IP or MFA where feasible; rotate DB credentials with least-privilege accounts.
- Ensure robust logging, monitor for abnormal authentication and data-access events, and test changes in staging before production.
- Coordinate patch window and rollback plans; document compensating controls until patch is applied.
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.
