CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

Sql injection

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

CVE-2020-9340

CVE-2020-9340 affects fauzantrif eLection 2.0, a web-based election system. The vulnerability is an SQL Injection in the admin/ajax/op_kandidat.php id parameter, enabling manipulation of the backend SQL query. CVSS metrics indicate a network-accessible flaw with low initial complexity and no auth...

CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter. Recent assessments: J3rryBl4nks at March 09, 2020 9:27pm UTC reported: This is an authenticated SQL Injection that should lead to a reverse shell. It’s very easy to identify, and to exploit. The value is low...