CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the login_action.php resource does not validate the characters received and they are sent unfiltered to the database.

Score
CVSS 3.1 9.8 Critical
Status
Modified - help@fluidattacks.com
Published
2023-12-20
Last modified
2024-08-02
Weaknesses
CWE-89

Affected products

References

 
 
© AVABIS GmbH privacypolicy about