CVE-2025-11417: Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload

Published Oct 7, 2025

Updated

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/votersadd.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Campcodes Advanced Online Voting Management System

Campcodes Advanced Online Voting System=1.0

Event History

Oct 7, 2025

CVE Published

via MITRE·11:32 PM

Data Sourced

via MITRE·11:32 PM

DescriptionSeverityWeakness

Oct 8, 2025

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Oct 8, 2026

Event

via NVD·02:44 PM

Frequently Asked Questions

What is the severity of CVE-2025-11417?

CVE-2025-11417 is considered a critical vulnerability due to the potential for unrestricted file uploads that can be exploited remotely.

How do I fix CVE-2025-11417?

To mitigate CVE-2025-11417, ensure proper validation and sanitization of file uploads in the /admin/voters_add.php script.

What software is affected by CVE-2025-11417?

CVE-2025-11417 affects Campcodes Advanced Online Voting Management System version 1.0.

Can CVE-2025-11417 be exploited remotely?

Yes, CVE-2025-11417 can be exploited remotely, allowing attackers to manipulate file uploads.

What type of attack does CVE-2025-11417 enable?

CVE-2025-11417 enables attackers to execute an unrestricted file upload attack via the manipulated photo argument.