CVE-2023-48433: Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48433?
CVE-2023-48433 is classified as a high severity vulnerability due to its potential for exploitation through SQL injection.
How do I fix CVE-2023-48433?
To fix CVE-2023-48433, ensure that user input is properly validated and sanitized before being processed in SQL queries.
What types of attacks can be executed using CVE-2023-48433?
CVE-2023-48433 can be exploited for unauthorized data access and manipulation through SQL injection attacks.
Which application is affected by CVE-2023-48433?
CVE-2023-48433 affects the Online Voting System Project version 1.0.
Is authentication required to exploit CVE-2023-48433?
No, CVE-2023-48433 can be exploited without authentication, making it particularly dangerous.