CVE-2025-11409: Campcodes Advanced Online Voting Management System index.php sql injection

Published Oct 7, 2025

Updated

A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Software

2 affected components

Campcodes Advanced Online Voting Management System

Campcodes Advanced Online Voting System=1.0

Event History

Oct 7, 2025

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11409?

CVE-2025-11409 is categorized as a high-severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-11409?

To fix CVE-2025-11409, validate and sanitize all user inputs to prevent SQL injection vulnerabilities.

What system is affected by CVE-2025-11409?

CVE-2025-11409 affects the Campcodes Advanced Online Voting Management System version 1.0.

Can CVE-2025-11409 be exploited remotely?

Yes, CVE-2025-11409 can be exploited remotely, allowing attackers to manipulate data through SQL injection.

What is the impact of CVE-2025-11409?

The impact of CVE-2025-11409 includes unauthorized access to database information and potential data loss.