---
id: CVE-2025-11410
title: >-
  A flaw has been found in Campcodes Advanced Online Voting Management System
  1.0
summary: >-
  A flaw has been found in Campcodes Advanced Online Voting Management System
  1.0. This affects an unknown function of the file /admin/voters_add.php.
  Executing manipulation of the argument firstname can lead to sql injection.
  The attack c…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-74
  - CWE-89
vendor: campcodes
product: advanced_online_voting_system
affected:
  - advanced_online_voting_system = 1.0
published: '2025-10-07'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T13:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11410'
references:
  - url: 'https://github.com/hbesljx/vul/issues/3'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.327347'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.327347'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.665586'
    label: cna@vuldb.com
  - url: 'https://www.campcodes.com/'
    label: cna@vuldb.com
  - url: 'https://github.com/hbesljx/vul/issues/3'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00332
epssPercentile: 0.2434
ingestedAt: '2026-10-08T13:42:54.984Z'
---

## Overview

A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Other parameters might be affected as well.

## Affected

- `advanced_online_voting_system = 1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.