CVE-2025-6352

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-425

Affected software

No affected versions have been published.

Timeline

Published
Jun 20, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-635206.1Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate).CVE-2025-635224.6Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management functionCVE-2025-635236.5FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticatCVE-2025-635258.8An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges viCVE-2025-635265.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails toCVE-2025-635275.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and hprofile.php compCVE-2025-635285.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the blooddinfo.php component. The applicatiCVE-2025-635298.8A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php that allows an attacker to set or predict a user's CVE-2025-63535.4A vulnerability classified as problematic was found in code-projects Responsive Blog 1.0. Affected by this vulnerability is an unknown functCVE-2025-635319.8A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails tCVE-2025-635328.8A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to propeCVE-2025-635335.4A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php comp
CVE-2025-6352: Critical severity, CVSS 9.1 | Vulnix