CVE-2026-14648 MEDIUM

CVE-2026-14648: code-projects Online Voting System Login authentication.php test_input sql injection

Vendor Code-Projects
Product Online Voting System
Weakness CWE-89 · SQLi
Published July 4, 2026
Last update July 6, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authentication.php of the component Login. Such manipulation of the argument adminUserName/adminPassword leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Key dates

02Disclosure timeline

July 4, 2026 CVE published
July 6, 2026 Record updated