CVE-2025-11508: code-projects Voting System voters_add.php unrestricted upload
A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the file /admin/votersadd.php. Such manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11508?
CVE-2025-11508 is considered a critical vulnerability due to the unrestricted upload ability it allows.
How do I fix CVE-2025-11508?
To fix CVE-2025-11508, update the Voting System to the latest version that addresses the unrestricted upload vulnerability.
What systems are affected by CVE-2025-11508?
CVE-2025-11508 affects the code-projects Voting System version 1.0.
Can CVE-2025-11508 be exploited remotely?
Yes, CVE-2025-11508 allows for remote exploitation through manipulation of the photo upload argument.
What function is vulnerable in CVE-2025-11508?
The vulnerability in CVE-2025-11508 is found in the /admin/voters_add.php file of the Voting System.