The Online Voting System 1.0 from code-projects contains a SQL injection vulnerability in the test_input function of /saveVote.php. An attacker can remotely manipulate input parameters (voterName, voterEmail, voterID, selectedCandidate) to inject SQL commands, potentially compromising the database. No official patch or remediation guidance is currently available from the vendor, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, modification, or deletion. Given the context of an online voting system, this could undermine vote integrity and confidentiality. However, the vulnerability requires no privileges or user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and parameterized queries as a temporary mitigation to prevent SQL injection. Monitor vendor channels for updates on patches or official fixes.