| Titolo | code-projects Online Event Judging System 1.0 SQL Injection |
|---|
| Descrizione | A weakness has been identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file add_contestant.php. This manipulation of the argument fullname causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. |
|---|
| Fonte | ⚠️ https://github.com/zzonce/cve/issues/3 |
|---|
| Utente | seeu1 (UID 91443) |
|---|
| Sottomissione | 13/10/2025 06:16 (12 mesi fa) |
|---|
| Moderazione | 26/10/2025 06:33 (13 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 329926 [code-projects Online Event Judging System 1.0 /add_contestant.php fullname iniezione SQL] |
|---|
| Punti | 19 |
|---|