CVE-2023-2052

A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballot_down.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225937 was assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%206.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225937Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225937Third Party Advisory
• https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%206.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225937Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225937Third Party Advisory

Published

Apr 14, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20513An insufficient bounds check in PMFW (Power Management Firmw…3.3
• CVE-2023-20514Improper handling of parameters in the AMD Secure Processor …8.7
• CVE-2023-20515Improper access control in the fTPM driver in the trusted OS…5.7
• CVE-2023-20516Improper handling of insufficiency privileges in the ASP cou…3.3
• CVE-2023-20518Incomplete cleanup in the ASP may expose the Master Encrypti…1.9
• CVE-2023-20519A Use-After-Free vulnerability in the management of an SNP g…3.3
• CVE-2023-20520Improper access control settings in ASP Bootloader may allow…9.8
• CVE-2023-20521TOCTOU in the ASP Bootloader may allow an attacker with phys…5.7
• CVE-2023-20522Insufficient input validation in ASP may allow an attacker w…7.5
• CVE-2023-20523TOCTOU in the ASP may allow a physical attacker to write bey…5.7
• CVE-2023-20524An attacker with a compromised ASP could possibly send malfo…7.5
• CVE-2023-20525Insufficient syscall input validation in the ASP Bootloader …6.5