Lucene search
China National Vulnerability DatabaseCNVD-2023-29412HistoryApr 18, 2023 - 12:00 a.m.
Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29412)
2023-04-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
campcodes
online voting system
sql injection
vulnerability
validation
sql commands
sensitive data
cnvd-2023-29412
0.002 Low
EPSS
Percentile
52.2%
Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/ballot_up.php, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| campcodes advanced online voting system campcodes advanced online voting system v | eq | 1.0 |
Related
nvd
nvd
CVE-2023-2049
2023-04-14 11:15:07
prion
prion
Sql injection
2023-04-14 11:15:00
cve
cve
CVE-2023-2049
2023-04-14 11:15:07
cvelist
cvelist