Lucene search
+L

20 matches found

OSV
OSV
•added 2025/12/18 8:15 p.m.•20 views

CVE-2025-14889

A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/votersedit.php of the component Password Handler. Performing a manipulation of the argument ID results in improper authorization. The attack is...

6.3CVSS5.5AI score0.00289EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/18 8:02 p.m.•8 views

CVE-2025-14889 Campcodes Advanced Voting Management System Password voters_edit.php improper authorization

A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/votersedit.php of the component Password Handler. Performing a manipulation of the argument ID results in improper authorization. The attack is...

5.5CVSS5.6AI score0.00289EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•7 views

CVE-2025-14889: Improper Authorization

A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/votersedit.php of the component Password Handler. Performing a manipulation of the argument ID results in improper authorization. The attack is...

6.3CVSS5.6AI score0.00289EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•6 views

CVE-2025-11422: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

9.8CVSS6.9AI score0.0052EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•8 views

CVE-2025-11417: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/votersadd.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has be...

8.8CVSS6.3AI score0.00325EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•7 views

CVE-2025-11409: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now...

8.8CVSS6.5AI score0.00332EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•7 views

CVE-2025-11410: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/votersadd.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...

8.8CVSS6.5AI score0.00332EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-33680

Malicious code in bioql PyPI...

5.3CVSS5.1AI score0.00499EPSS
SaveExploits1References4
NVD
NVD
•added 2025/09/28 5:15 p.m.•18 views

CVE-2025-11111

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to...

9.8CVSS0.00478EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•6 views

CVE-2025-11111: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to...

9.8CVSS7AI score0.00478EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/23 6:32 a.m.•22 views

CVE-2024-11175

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS4.9AI score0.00499EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/13 4:15 p.m.•36 views

CVE-2024-11175

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS0.00499EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/13 3:31 p.m.•42 views

CVE-2024-11175 Public CMS Voting Management save cross site scripting

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS0.00499EPSS
SaveExploits1References4
osv-cve
osv-cve
•added 2024/11/13 3:31 p.m.•13 views

CVE-2024-11175 Public CMS Voting Management save cross site scripting

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS3.6AI score
SaveExploits0References6
Mend
Mend
•added 2024/11/13 3:31 p.m.•4 views

CVE-2024-11175

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS0.00499EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/11/13 3:31 p.m.•17 views

CVE-2024-11175 Public CMS Voting Management save cross site scripting

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS6.2AI score0.00499EPSS
SaveExploits1References4
CVE
CVE
•added 2024/11/13 3:31 p.m.•70 views

CVE-2024-11175

Public CMS 5.202406.d contains a cross-site scripting (XSS) vulnerability in the Voting Management module, caused by how /admin/cmsVote/save processes input. The issue is exploitable remotely and affects the Voting Management component. A patch is available: b9530b9cc1f5cfdad4b637874f59029a6283a6...

5.3CVSS3.9AI score0.00499EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•4 views

PT-2024-16798

Name of the Vulnerable Software and Affected Versions Public CMS version 5.202406.d Description A vulnerability was found in the Voting Management component of Public CMS, affecting the file /admin/cmsVote/save. This issue leads to cross-site scripting and can be initiated remotely. Recommendatio...

5.3CVSS5.4AI score0.00499EPSS
SaveExploits1References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•6 views

CVE-2024-11175: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has be...

5.3CVSS3.3AI score0.00499EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/09/25 12:00 a.m.•11 views

SQL Injection Vulnerability in Yisoft's Voting Management System (CNVD-2018-21963)

Yisoftone Voting Management System is a free voting management system released by Yisoftone.com. A SQL injection vulnerability exists in Yisoft Polling Management System, which can be exploited by attackers to obtain sensitive information due to failure to properly filter input parameters...

7.7AI score
SaveExploits0
Rows per page
Query Builder