CVE-2025-9694: A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the...

Summary

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
campcodes	advanced_online_voting_system	1.0 `cpe:2.3:a:campcodes:advanced_online_voting_system:1.0:::::::*`

Original advisory text

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the...

A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

References

https://vuldb.com/?ctiid.321905 Permissions Required VDB Entry
https://vuldb.com/?id.321905 Third Party Advisory VDB Entry
https://vuldb.com/?submit.638947 Third Party Advisory VDB Entry
https://www.campcodes.com/ Product
https://github.com/zhaodaojie/cve/issues/7 Exploit Issue Tracking