https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13287.htmlhttps://patchthecve.com/cve/CVE-2025-13287.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available to https://patchthecve.com/cve/CVE-2025-13286.htmlhttps://patchthecve.com/cve/CVE-2025-13286.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been rhttps://patchthecve.com/cve/CVE-2025-13285.htmlhttps://patchthecve.com/cve/CVE-2025-13285.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-13061.htmlhttps://patchthecve.com/cve/CVE-2025-13061.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.3: A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2024-45987.htmlhttps://patchthecve.com/cve/CVE-2024-45987.htmlWed, 17 Jun 2026 07:55:06 +0000MEDIUM 6.5: Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vulnerability allows an attacker to craft a malicious link that, when clicked by an authenticated user, automatically submits a vote for a specified party without the user's consent o