Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. The Voting System is vulnerable to a SQL injection vulnerability. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

PT-2023-32889 · Code Projects · Voting System

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical issue has been found in the Voting System, affecting the /admin/ file of the Admin Login component. The manipulation of the username argument leads to sql injection. The exploit...

PT-2023-32887 · Code Projects · Automated Voting System

Name of the Vulnerable Software and Affected Versions: code-projects Automated Voting System version 1.0 Description: A critical vulnerability has been found in the Automated Voting System. This issue affects the /admin/ file of the Admin Login component. The manipulation of the username argument...

CVE-2023-7128: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

Automated Voting System SQL Injection Vulnerability

Automated Voting System is an automated voting system. Automated Voting System suffers from a SQL injection vulnerability. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-32890

Name of the Vulnerable Software and Affected Versions code-projects Voting System version 1.0 Description A critical vulnerability was found in the Voting System. The issue affects an unknown function of the component Voters Login. The manipulation of the voter argument leads to SQL injection. Th...

CVE-2023-7129: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...

CVE-2023-7127: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

PT-2023-32888

Name of the Vulnerable Software and Affected Versions code-projects Automated Voting System version 1.0 Description A critical vulnerability was found in the Login component of the Automated Voting System. The manipulation of the idno argument leads to SQL injection. The exploit has been disclose...

Votes delegated to the zero address will be stuck forever and user can no longer delegate votes

Lines of code Vulnerability details Bug Description VotesUpgradeable automatically delegates a user's votes to themselves if a delegatee is not set. VotesUpgradeable.solL165-168 function delegatesaddress account public view virtual returns address VotesStorage storage $ = getVotesStorage; return...

Signature Verification for batchVoteForManyWithSig Function

Lines of code Vulnerability details Potential Risk: The batchVoteForManyWithSig function in the CultureIndex contract allows multiple users to execute a batch of votes using provided signatures. While it attempts to verify the signatures, there are potential risks associated with signature...

Business Logic Vulnerability in dropTopVotedPiece Function

Lines of code Vulnerability details Potential Risk: The dropTopVotedPiece function in the CultureIndex contract allows the dropperAdmin to drop the top-voted piece. While the function checks if the caller is the dropperAdmin, there is a potential business logic vulnerability. The function only...

Delegation to address(0) causes permanent loss of voting power

Lines of code Vulnerability details Impact As stated in the comment on line 12 of NontransferableERC20Votes.sol, delegation of vote power can be done through the delegate function or by providing a signature to be used with delegateBySig. However, these functions do not prevent users from...

CultureIndex.sol#_vote() - Creators of certain piece can vote for their piece

Lines of code Vulnerability details Impact In CultureIndex there is a function vote that allows users to vote for a piece to get sold on the auction house. Each piece has creators that get cut of the sale. The problem is that there is no checks if the user voting for a certain piece is it's own...

CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...