Lucene search
+L

3 matches found

CVE
CVE
•added 2023/12/20 8:29 p.m.•63 views

CVE-2023-48434

CVE-2023-48434 affects Online Voting System Project v1.0. The reg_action.php resource’s username parameter does not validate input, sending unfiltered data to the database and allowing unauthenticated SQL injection. Multiple connected sources corroborate this vulnerability, consistently describin...

9.8CVSS10AI score0.00666EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•5 views

CVE-2023-48434: Improper Neutralization of Special Elements used in an SQL Command

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00666EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•5 views

CVE-2023-48433: Improper Neutralization of Special Elements used in an SQL Command

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00666EPSS
SaveExploits0References2
Rows per page
Query Builder