| Titolo | code-projects Automated Voting System 1.0 SQL Injection |
|---|
| Descrizione | A weakness has been identified in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /admin/add_candidate_modal.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. |
|---|
| Fonte | ⚠️ https://github.com/daminqaq/damin-CVE/issues/1 |
|---|
| Utente | daminqaq (UID 91530) |
|---|
| Sottomissione | 11/10/2025 09:44 (12 mesi fa) |
|---|
| Moderazione | 12/10/2025 15:42 (1 day later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 328087 [code-projects Automated Voting System 1.0 add_candidate_modal.php. firstname iniezione SQL] |
|---|
| Punti | 19 |
|---|