CVE-2025-11417

Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload

CVSS 5.3 MEDIUMEPSS 0.3%CWE-284 CWE-434

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/voters_add.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

Campcodes · Advanced Online Voting Management System

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/hbesljx/vul/issues/4 https://vuldb.com/?ctiid.327353 https://vuldb.com/?id.327353 https://vuldb.com/?submit.665597 https://www.campcodes.com/