Code-Projects Automated Voting System Unauthorized Access Vulnerability

A vulnerability allowing unauthorized access to the backend has been identified in Code-Projects Automated Voting System version 1.0. The issue arises in the Backend component, specifically within the vote.php file. This vulnerability allows attackers to bypass the login process by directly accessing vote.php, which includes sess.php. As a result, they can manipulate data and cause data leakage.

Impact

Exploitation of this vulnerability bypasses authentication, allowing direct access to the backend. This could lead to unauthorized data manipulation and leakage.

Reproduction

To reproduce this vulnerability, access the vote.php file directly. This will bypass the authentication process and grant access to the backend, allowing for data manipulation and leakage.