CVE-2025-11410: Campcodes Advanced Online Voting Management System voters_add.php sql injection

Published Oct 7, 2025

Updated

A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/votersadd.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Other parameters might be affected as well.

Affected Software

2 affected components

Campcodes Advanced Online Voting Management System

Campcodes Advanced Online Voting System=1.0

Event History

Oct 7, 2025

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Oct 8, 2026

Event

via NVD·02:42 PM

Frequently Asked Questions

What is the severity of CVE-2025-11410?

CVE-2025-11410 is classified as a high severity vulnerability due to its potential for remote SQL injection.

How do I fix CVE-2025-11410?

To fix CVE-2025-11410, it is essential to sanitize and validate all user inputs in the affected file /admin/voters_add.php.

What software is affected by CVE-2025-11410?

CVE-2025-11410 affects Campcodes Advanced Online Voting Management System version 1.0.

Can CVE-2025-11410 be exploited remotely?

Yes, CVE-2025-11410 can be exploited remotely, allowing attackers to execute SQL injection attacks.

What impact does CVE-2025-11410 have on data security?

CVE-2025-11410 can lead to unauthorized access to the database and manipulation of sensitive voter information.