Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2023/12/20 8:28 p.m.36 views

CVE-2023-48433 Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00666EPSS
SaveExploits0References2
CVE
CVE
added 2023/12/20 8:28 p.m.39 views

CVE-2023-48433

CVE-2023-48433 affects Online Voting System Project v1.0. The issue is multiple unauthenticated SQL injection vulnerabilities in the login_action.php resource, caused by lack of validation/escaping for the username parameter, allowing unfiltered data to reach the database. Impact is high (confide...

9.8CVSS10AI score0.00666EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder