CVE-2023-7128: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

Automated Voting System SQL Injection Vulnerability

Automated Voting System is an automated voting system. Automated Voting System suffers from a SQL injection vulnerability. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-32888

Name of the Vulnerable Software and Affected Versions code-projects Automated Voting System version 1.0 Description A critical vulnerability was found in the Login component of the Automated Voting System. The manipulation of the idno argument leads to SQL injection. The exploit has been disclose...

PT-2023-32890

Name of the Vulnerable Software and Affected Versions code-projects Voting System version 1.0 Description A critical vulnerability was found in the Voting System. The issue affects an unknown function of the component Voters Login. The manipulation of the voter argument leads to SQL injection. Th...

CVE-2023-7129: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...

CVE-2023-7127: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48434 Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48434

CVE-2023-48434 affects Online Voting System Project v1.0. The reg_action.php resource’s username parameter does not validate input, sending unfiltered data to the database and allowing unauthenticated SQL injection. Multiple connected sources corroborate this vulnerability, consistently describin...

CVE-2023-48434 Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48433

CVE-2023-48433 affects Online Voting System Project v1.0. The issue is multiple unauthenticated SQL injection vulnerabilities in the login_action.php resource, caused by lack of validation/escaping for the username parameter, allowing unfiltered data to reach the database. Impact is high (confide...

CVE-2023-48433 Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Voting System Project v1.0, which stems from the username parameter in regaction.php that does not validate received characters and is sent to the database...

PT-2023-30851 · Unknown · Projectworld Online Voting System

Name of the Vulnerable Software and Affected Versions: Online Voting System Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the "login action.php" resource does not validate the characters received and they are...