CVE-2023-48434: Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48434?
CVE-2023-48434 is classified as a high severity vulnerability due to its potential for unauthenticated SQL injection attacks.
How do I fix CVE-2023-48434?
To fix CVE-2023-48434, you should implement input validation and properly sanitize user inputs before processing them in SQL queries.
What systems are affected by CVE-2023-48434?
CVE-2023-48434 affects the Online Voting System Project version 1.0 specifically.
What are the implications of exploiting CVE-2023-48434?
Exploiting CVE-2023-48434 can allow attackers to execute arbitrary SQL commands, potentially leading to data leakage or corruption.
Is authentication required to exploit CVE-2023-48434?
No, CVE-2023-48434 can be exploited without authentication, making it particularly dangerous for exposed systems.