Vulnerabilidades do Campcodes Advanced Online Voting Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Campcodes Advanced Online Voting Management System: 5 registro(s), com versões afetadas e correções.
CVE-2025-11422
Crítica · 9.8
CWE-74 07/10/2025
Injeção de SQL no login.php do Campcodes Advanced Online Voting Management System
Foi identificada uma vulnerabilidade no Campcodes Advanced Online Voting Management System 1.0. O elemento afetado é uma função não identificada do arquivo /admin/login.php. A manipulação do argumento Username leva a injeção de SQL. O ataque pode ser executado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2025-11417
Alta · 8.8
CWE-284 07/10/2025
Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/voters_add.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-11410
Alta · 8.8
CWE-74 07/10/2025
Campcodes Advanced Online Voting Management System voters_add.php sql injection
A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Other parameters might be affected as well.
CVE-2025-11409
Alta · 8.8
CWE-74 07/10/2025
Campcodes Advanced Online Voting Management System index.php sql injection
A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
CVE-2025-11111
Crítica · 9.8
CWE-74 28/09/2025
Campcodes Advanced Online Voting Management System candidates_edit.php sql injection
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.