CVE-2025-7558

MEDIUM

code-projects Voting System 1.0 - SQL Injection via /admin/positions_add.php Description Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-7558. PoCs published by rundas-r00t.

AI-analyzed exploit summary The repository provides a detailed technical analysis of CVE-2025-7558, an SQL injection vulnerability in the Voting System 1.0's `/admin/positions_add.php` file. It includes code snippets, vulnerability context, and instructions for using `sqlmap` to exploit the flaw.

Description

A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

github WRITEUP
by rundas-r00t · poc
https://github.com/rundas-r00t/CVE-2025-7558-PoC

The repository provides a detailed technical analysis of CVE-2025-7558, an SQL injection vulnerability in the Voting System 1.0's `/admin/positions_add.php` file. It includes code snippets, vulnerability context, and instructions for using `sqlmap` to exploit the flaw.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: code-projects Voting System 1.0
Auth required
Prerequisites: Access to the `/admin/positions_add.php` endpoint · Valid authentication credentials
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.316256
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.316256
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.615024
Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking
https://github.com/i-Corner/cve/issues/6
Product product
https://code-projects.org/

Scores

CVSS v3 6.3
EPSS 0.0032
EPSS Percentile 23.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
fabian/voting_system 1.0
Published Jul 14, 2025
Tracked Since Feb 18, 2026