CVE-2020-9336

fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...

CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

fauzantrif eLection SQL Injection Vulnerability

fauzantrif eLection is a web-based election system. A SQL injection vulnerability exists in fauzantrif eLection 2.0. An attacker can exploit this vulnerability to achieve remote code execution via the admin/ajax/opkandidat.php id parameter...

fauzantrif eLection Cross-Site Scripting Vulnerability

fauzantrif eLection is a web-based election system. A cross-site scripting vulnerability exists in fauzantrif eLection 2.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Admin Dashboard - Settings - Election - "message if election is closed" field...

CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

CVE-2020-9336

fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...

CVE-2020-9336

fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...

Sql injection

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

CVE-2020-9336

CVE-2020-9336 affects fauzantrif eLection 2.0, a web-based election system. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the Admin Dashboard → Settings → Election → 'message if election is closed' field. Root cause: input in that field is not properly sanitized, enabling...

CVE-2020-9340: Improper Neutralization of Special Elements used in an SQL Command

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

CVE-2020-9336: Improper Neutralization of Input During Web Page Generation

fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...

Exploit for SQL Injection in Fauzantrif_Election_Project Fauzantrif_Election

eLection-TriPath...