CVE-2025-11512: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/votersadd.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely. The exploit has...

CVE-2025-11512

CVE-2025-11512 affects code-projects Voting System 1.0. The issue is a cross-site scripting vulnerability in the file /admin/voters_add.php caused by improper handling of the Firstname/Lastname/Platform parameters. It can be exploited remotely and the exploit has been made public. Affected versio...

CVE-2025-11410: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/votersadd.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...

CVE-2025-7555: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/votersadd.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-7151: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/votersadd.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be initiated remotely. The...