Campcodes Advanced Online Voting Management System vulnerabilities

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0 affecting /admin/voters_add.php. Manipulation of the photo argument leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.

A flaw has been found in Campcodes Advanced Online Voting Management System 1.0 affecting /admin/voters_add.php. Manipulation of the firstname argument leads to SQL injection. The attack can be executed remotely and the exploit is public; other parameters might also be affected.

A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0 affecting /index.php. Manipulation of the voter argument results in SQL injection. Remote exploitation is possible and the exploit is now public.