CVE-2024-45986

A stored Cross-Site Scripting (XSS) vulnerability exists in Projectworld Online Voting System 1.0 . The issue occurs during account registration when a malicious JavaScript payload is submitted; the application stores this payload and subsequently executes it on the voter.php and profile.php page...

CVE-2023-48434

CVE-2023-48434 affects Online Voting System Project v1.0. The reg_action.php resource’s username parameter does not validate input, sending unfiltered data to the database and allowing unauthenticated SQL injection. Multiple connected sources corroborate this vulnerability, consistently describin...

CVE-2023-48433

CVE-2023-48433 affects Online Voting System Project v1.0. The issue is multiple unauthenticated SQL injection vulnerabilities in the login_action.php resource, caused by lack of validation/escaping for the username parameter, allowing unfiltered data to reach the database. Impact is high (confide...