PT-2023-17443 · Unknown · Campcodes Advanced Online Voting System
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Campcodes Advanced Online Voting System version 1.0
Description
A critical issue was found in the system, affecting some unknown functionality of the file login.php. The manipulation of the
voter argument leads to sql injection. The attack can be launched remotely.Recommendations
For version 1.0, consider disabling the
login.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the voter argument in the affected functionality to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Campcodes Advanced Online Voting System