CVEvulnerability
CVE-2025-6352
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.5 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-425
Description
A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected configurations
• fabian automated voting system 1.0
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://code-projects.org/ Product
- https://github.com/asd1238525/cve/blob/main/Unauthorized.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.313344 Permissions Required, VDB Entry
- https://vuldb.com/?id.313344 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.597239 Third Party Advisory, VDB Entry
- https://github.com/asd1238525/cve/blob/main/Unauthorized.md Exploit, Third Party Advisory