15 matches found
EUVD-2020-30161
Malware in sbrugna...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9340
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
fauzantrif eLection Cross-Site Scripting Vulnerability
fauzantrif eLection is a web-based election system. A cross-site scripting vulnerability exists in fauzantrif eLection 2.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Admin Dashboard - Settings - Election - "message if election is closed" field...
fauzantrif eLection SQL Injection Vulnerability
fauzantrif eLection is a web-based election system. A SQL injection vulnerability exists in fauzantrif eLection 2.0. An attacker can exploit this vulnerability to achieve remote code execution via the admin/ajax/opkandidat.php id parameter...
CVE-2020-9340
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
Sql injection
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
CVE-2020-9336
CVE-2020-9336 affects fauzantrif eLection 2.0, a web-based election system. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the Admin Dashboard → Settings → Election → 'message if election is closed' field. Root cause: input in that field is not properly sanitized, enabling...
PT-2020-20591
Name of the Vulnerable Software and Affected Versions fauzantrif eLection version 2.0 Description The issue concerns a Cross-Site Scripting XSS flaw. It occurs via the Admin Dashboard, specifically in the Settings - Election section, where the "message if election is closed" field is vulnerable...
CVE-2020-9340: Improper Neutralization of Special Elements used in an SQL Command
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
PT-2020-20595
Name of the Vulnerable Software and Affected Versions fauzantrif eLection version 2.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "admin/ajax/op kandidat.php" API endpoint. This allows for potential exploitation. No information is provided about the...
CVE-2020-9336: Improper Neutralization of Input During Web Page Generation
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
