A vulnerability was determined in code-projects Automated Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/update_user.php. This manipulation of the argument Password causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 2.0 · fabianNVD modified 2026-10-08 12:10
Affected (CPE criteria) 1
cpe:2.3:a:fabian:automated_voting_system:1.0:*:*:*:*:*:*:*
References 5
- https://code-projects.org/ Product
- https://github.com/xmqaq/cve/issues/7 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.328088 Permissions Required, VDB Entry
- https://vuldb.com/?id.328088 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.673218 Third Party Advisory, VDB Entry