9 matches found
CVE-2023-38916
SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the user input fields...
CVE-2022-31508
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
evoting path traversal vulnerability
evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...
CVE-2022-31508
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31508
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31508: Improper Limitation of a Pathname to a Restricted Directory
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
PT-2022-20777
Name of the Vulnerable Software and Affected Versions idayrus/evoting versions prior to 2022-05-08 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-08, update to a version that includes a...
Evoting path traversal vulnerability
evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...
free.worldevotingplatform.com Cross Site Scripting vulnerability OBB-2556195
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...