Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Voting System Project v1.0, which stems from the username parameter in loginaction.php that does not validate received characters and is sent to the database...

CVE-2023-43470

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

Sql injection

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

Online Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by Carlo Montero Personal Developer. A security vulnerability exists in Online Voting System version v.1.0 that could allow a remote attacker to execute arbitrary code via the checklogin.php component...

CVE-2023-43470

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

PT-2023-28835 · Unknown · Janobe Online Voting System

Name of the Vulnerable Software and Affected Versions: janobe Online Voting System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the checklogin.php component. This is due to a SQL injection vulnerability. Recommendations: For janobe Online Voting System...

CVE-2023-43470: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

CVE-2023-43470

CVE-2023-43470 affects the janobe Online Voting System v1.0, with a SQL injection in checklogin.php that allows a remote attacker to execute arbitrary code. The NVD entry lists a Critical CVSS 3.1 score (9.8) with network access, low attack complexity, and high impacts to confidentiality, integri...

CVE-2023-43470

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component...

CVE-2023-38916

SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the user input fields...

CVE-2023-38916

SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the user input fields...

Votes can be cast even if the proposal state is not "Active"

Lines of code Vulnerability details Impact Votes can be cast on proposals that are not currently open for voting, which can lead to unexpected behavior and potential manipulation of the voting process. By allowing votes to be cast on inactive proposals, it undermines the intended functionality of...

Campcodes Advanced Online Voting System SQL Injection Vulnerability

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/votersrow.php, which can be...

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29415)

Campcodes Advanced Online Voting System is an online voting system. The Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter description of the file /admin/positionsadd.ph...

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29412)

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/ballotup.php, which can be...

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29413)

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/candidatesrow.php,...

CVE-2023-2054

A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /admin/positionsdelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-2054

A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /admin/positionsdelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-2055

A vulnerability has been found in Campcodes Advanced Online Voting System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/configsave.php. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2023-2053

A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/candidatesrow.php. The manipulation of the argument id leads to sql injection. The attack may be launched...