CVE-2023-2048

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/voters_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225933 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
CampcodesAdvanced Online Voting System1.0

References

Timeline

Published
Apr 14, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-20498.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknoCVE-2023-20508.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown proCVE-2023-205072.3An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data inCVE-2023-205085.0Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled bCVE-2023-205095.2An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, CVE-2023-20518.8A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of theCVE-2023-205106.0An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially reCVE-2023-205116.4Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentCVE-2023-205121.9A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug informaCVE-2023-205133.3An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) tCVE-2023-205148.7Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to funCVE-2023-205155.7Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading
CVE-2023-2048: High severity, CVSS 8.8 | Vulnix