CVE-2026-14649

EUVD-2026-41693
A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attack can be initiated remotely.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
code-projectsonline_voting_system
1.0
CNA
Common Weakness Enumeration
References
https://code-projects.org/
https://gist.github.com/c4ttr4ck/a29b2238099fa07b4f072c21123b55ef
https://vuldb.com/cve/CVE-2026-14649
https://vuldb.com/submit/846330
https://vuldb.com/vuln/376162
https://vuldb.com/vuln/376162/cti