CVE-2024-45986

Projectworld Online Voting System 1.0 contains a stored Cross-Site Scripting (XSS) vulnerability. The flaw occurs when an account is registered with a malicious JavaScript payload, which is stored and later executed in voter.php and profile.php whenever account information is accessed. Affected d...

CVE-2023-48434

CVE-2023-48434 affects Online Voting System Project v1.0. The reg_action.php resource’s username parameter does not validate input, sending unfiltered data to the database and allowing unauthenticated SQL injection. Multiple connected sources corroborate this vulnerability, consistently describin...

CVE-2023-48433

CVE-2023-48433 affects Online Voting System Project v1.0. The issue is multiple unauthenticated SQL injection vulnerabilities in the login_action.php resource, caused by lack of validation/escaping for the username parameter, allowing unfiltered data to reach the database. Impact is high (confide...