CVE-2023-48434

CVE-2023-48434 affects Online Voting System Project v1.0. The reg_action.php resource’s username parameter does not validate input, sending unfiltered data to the database and allowing unauthenticated SQL injection. Multiple connected sources corroborate this vulnerability, consistently describin...

CVE-2023-48434 Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48433 Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48433

CVE-2023-48433 affects Online Voting System Project v1.0. The issue is multiple unauthenticated SQL injection vulnerabilities in the login_action.php resource, caused by lack of validation/escaping for the username parameter, allowing unfiltered data to reach the database. Impact is high (confide...

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Voting System Project v1.0, which stems from the username parameter in regaction.php that does not validate received characters and is sent to the database...

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Voting System Project v1.0, which stems from the username parameter in loginaction.php that does not validate received characters and is sent to the database...

PT-2023-30852 · Unknown · Projectworld Online Voting System

Name of the Vulnerable Software and Affected Versions: Online Voting System Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the "reg action.php" resource does not validate the characters received and they are se...

PT-2023-30851 · Unknown · Projectworld Online Voting System

Name of the Vulnerable Software and Affected Versions: Online Voting System Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the "login action.php" resource does not validate the characters received and they are...

CVE-2023-43470

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

Sql injection

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by Carlo Montero Personal Developer. A security vulnerability exists in Online Voting System version v.1.0 that could allow a remote attacker to execute arbitrary code via the checklogin.php component...

CVE-2023-43470

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

PT-2023-28835 · Unknown · Janobe Online Voting System

Name of the Vulnerable Software and Affected Versions: janobe Online Voting System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the checklogin.php component. This is due to a SQL injection vulnerability. Recommendations: For janobe Online Voting System...

CVE-2023-43470

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

CVE-2023-43470

CVE-2023-43470 affects the janobe Online Voting System v1.0, with a SQL injection in checklogin.php that allows a remote attacker to execute arbitrary code. The NVD entry lists a Critical CVSS 3.1 score (9.8) with network access, low attack complexity, and high impacts to confidentiality, integri...

CVE-2023-38916

SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the user input fields...

CVE-2023-38916

SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the user input fields...

Votes can be cast even if the proposal state is not "Active"

Lines of code Vulnerability details Impact Votes can be cast on proposals that are not currently open for voting, which can lead to unexpected behavior and potential manipulation of the voting process. By allowing votes to be cast on inactive proposals, it undermines the intended functionality of...

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29412)

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/ballotup.php, which can be...

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29415)

Campcodes Advanced Online Voting System is an online voting system. The Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter description of the file /admin/positionsadd.ph...