CVE-2025-11111: Campcodes Advanced Online Voting Management System candidates_edit.php sql injection
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11111?
CVE-2025-11111 is considered a critical vulnerability due to its potential for SQL injection and remote exploitation.
How do I fix CVE-2025-11111?
To fix CVE-2025-11111, validate and sanitize all user inputs to protect against SQL injection in the '/admin/candidates_edit.php' file.
What software is affected by CVE-2025-11111?
CVE-2025-11111 affects the Campcodes Advanced Online Voting Management System version 1.0.
Can CVE-2025-11111 be exploited remotely?
Yes, CVE-2025-11111 can be exploited remotely by attackers manipulating the ID argument.
What is the attack vector for CVE-2025-11111?
The attack vector for CVE-2025-11111 involves SQL injection via the '/admin/candidates_edit.php' file.