Threats tagged 'ghsa-38hj-9hq2-w2gj'

A SQL injection vulnerability exists in itsourcecode Online Voting System 1.0 in the /ajax.php?action=save_user endpoint. Manipulating the ID argument can lead to unauthorized database queries. The vulnerability is remotely exploitable and public exploit code is available. The CVSS score is 6.3, indicating a medium severity impact on confidentiality, integrity, and availability.