← Database

CVE-2025-11409

MEDIUM CVSS: 6.3 Published: 2025-10-07 Modified: 2026-06-17

Description

A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Platforms

Campcodes Advanced Online Voting System

Weakness Type

CWE-74, CWE-89

References