CVE-2025-11410
Campcodes Advanced Online Voting Management System voters_add.php sql injection
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 7, 2025
- Updated
- Oct 8, 2025
- Reserved
- Oct 7, 2025
Description
A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Other parameters might be affected as well.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Advanced Online Voting Management SystemCampcodes |
|
References
- VDB-327347 | Campcodes Advanced Online Voting Management System voters_add.php sql injectionvdb-entrytechnical-description
- VDB-327347 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #665586 | Campcodes Advanced Online Voting Management System 9/26 2024 SQL Injectionthird-party-advisory
- https://github.com/hbesljx/vul/issues/3exploitissue-tracking
- https://www.campcodes.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.