CVE-2025-11422: Campcodes Advanced Online Voting Management System login.php sql injection

Published Oct 8, 2025

Updated

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Campcodes Advanced Online Voting Management System

Campcodes Advanced Online Voting System=1.0

Event History

Oct 8, 2025

CVE Published

via MITRE·01:32 AM

Data Sourced

via MITRE·01:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11422?

CVE-2025-11422 has been classified as a critical vulnerability due to its potential for remote code execution through SQL injection.

How do I fix CVE-2025-11422?

To remediate CVE-2025-11422, you should sanitize all user inputs and implement prepared statements for SQL queries in the /admin/login.php file.

What systems are affected by CVE-2025-11422?

CVE-2025-11422 affects the Campcodes Advanced Online Voting Management System version 1.0.

Can CVE-2025-11422 be exploited remotely?

Yes, CVE-2025-11422 can be exploited remotely, allowing attackers to execute SQL injection attacks.

What type of vulnerability is CVE-2025-11422?

CVE-2025-11422 is an SQL injection vulnerability that arises due to unsanitized input in the login functionality.