Lucene search
+L

568 matches found

CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /ajax.php. An attacker can exploit this vulnerability to execute illega...

8.8CVSS7AI score0.00308EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•18 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter id/category in the file /index.php. An attacker can exploit this vulnerability to...

8.8CVSS7AI score0.00332EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•2 views

CVE-2025-13287: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available ...

8.8CVSS5.6AI score0.00332EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•3 views

CVE-2025-13286: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

8.8CVSS5.6AI score0.00308EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•2 views

CVE-2025-13285: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/13 9:06 p.m.•13 views

CVE-2025-13061

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS6.6AI score0.00302EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•15 views

itsourcecode Online Voting System 代码问题漏洞

Online Voting System is an online voting system. Online Voting System has a code issue vulnerability that stems from a lack of validation of uploaded files in the page parameter of file /index.php. An attacker can exploit this vulnerability to upload malicious files...

8.8CVSS6.6AI score0.00302EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•4 views

CVE-2025-13061: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...

8.8CVSS5.5AI score0.00302EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•32 views

CVE-2025-12238

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS7AI score0.00335EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/27 7:15 a.m.•19 views

CVE-2025-12238

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS5.7AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 7:15 a.m.•18 views

CVE-2025-12238

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 6:32 a.m.•37 views

CVE-2025-12238 code-projects Automated Voting System user.php sql injection

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

6.5CVSS0.00335EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 6:32 a.m.•18 views

EUVD-2025-36099

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS6.3AI score0.00335EPSS
SaveExploits1References6
CVE
CVE
•added 2025/10/27 6:32 a.m.•42 views

CVE-2025-12238

CVE-2025-12238 affects code-projects Automated Voting System 1.0, specifically the /admin/user.php file where manipulation of the Username parameter enables SQL injection. Multiple connected sources confirm remote exploitation potential and public release of the exploit. CNA/VulDB data indicate a...

8.8CVSS6.5AI score0.00335EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/27 6:32 a.m.•11 views

CVE-2025-12238 code-projects Automated Voting System user.php sql injection

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

6.5CVSS6.5AI score0.00335EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•26 views

PT-2025-43894

Name of the Vulnerable Software and Affected Versions code-projects Automated Voting System version 1.0 Description A security flaw exists in code-projects Automated Voting System 1.0. The issue involves a SQL injection that occurs through manipulation of the Username argument within an unknown...

8.8CVSS7.3AI score0.00335EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-12238: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

8.8CVSS5.6AI score0.00335EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•20 views

Code-Projects Automated Voting System SQL注入漏洞

Code-Projects Automated Voting System is a Code-Projects open source automated voting system. Code-Projects Automated Voting System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /admin/user.php, which could lead...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/10/17 12:00 a.m.•15 views

Automated Voting System add_candidate_modal.php File SQL Injection Vulnerability

Automated Voting System is an automated voting system. Automated Voting System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter firstname in file /admin/addcandidatemodal.php for externally entered SQL statements. An attacker can exploit this...

8.8CVSS8.3AI score0.00419EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/10/17 12:00 a.m.•16 views

Automated Voting System update_user.php File SQL Injection Vulnerability

Automated Voting System is an automated voting system. Automated Voting System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Password in the file /admin/updateuser.php. An attacker can exploit this...

7.2CVSS8.3AI score0.00435EPSS
SaveExploits1References1
Rows per page
Query Builder