CVE-2023-2051

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/positions_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225936.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Advanced Online Voting System	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%205.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.225936Permissions Required, Third Party Advisory
https://vuldb.com/?id.225936Third Party Advisory
https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%205.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.225936Permissions Required, Third Party Advisory
https://vuldb.com/?id.225936Third Party Advisory

Timeline

Published: Apr 14, 2023
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-205106.0An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially re CVE-2023-205116.4Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potent CVE-2023-205121.9A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug informa CVE-2023-205133.3An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) t CVE-2023-205148.7Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to fun CVE-2023-205155.7Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading CVE-2023-205163.3Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potent CVE-2023-205181.9Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell CVE-2023-205193.3A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's CVE-2023-20528.8A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknow CVE-2023-205209.8Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun CVE-2023-205215.7TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, po