| शीर्षक | campcodes Advanced Voting Management System using PHP/MySQLi 1.0 Authentication Bypass |
|---|
| विवरण | A logic flaw in the voter password update functionality allows an authenticated
administrator to reset any voter’s password without knowing the original
password. The application compares user-supplied plaintext input directly
against a stored password hash, causing the password to be unconditionally
updated with attacker-controlled input. This results in full voter account
takeover and compromise of election integrity.
|
|---|
| स्रोत | ⚠️ https://gist.github.com/nikstudy576-maker/82e1e1ede9b848880aa09b87b92bc22c |
|---|
| उपयोगकर्ता | Err404 (UID 93509) |
|---|
| सबमिशन | 15/12/2025 01:00 PM (10 महीनों पहले) |
|---|
| संयम | 18/12/2025 03:12 PM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 337378 [Campcodes Advanced Voting Management System 1.0 Password /admin/voters_edit.php id अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|