A vulnerability marked as critical has been reported in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection.
This vulnerability is reported as CVE-2025-12238. The attack is possible to be carried out remotely. Moreover, an exploit is present.
