Campcodes Complete Advance Loan Management System: Unrestricted file upload (CVE-2026-122047)
Campcodes Complete Advance Loan Management System 1.0 contains an unrestricted file upload vulnerability in /loan/application/banner.php via the image argument.
CVE search metadata
CVE search record: CVE-2026-122047. Severity: high. CVSS: 7.3. KEV: no. Product: Complete Advance Loan Management System (1.0). Brief: Campcodes Complete Advance Loan Management System: Unrestricted file upload (CVE-2026-122047). Brief link: https://feed.craftedsignal.io/briefs/2026-11-campcodes-loan-rce/
Triage facts
Revision 1- Applicability
- Complete Advance Loan Management System (1.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 00:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. The vulnerability exists within the 'move_uploaded_file' function of the file '/loan/application/banner.php'. Manipulation of the 'image' argument leads to an unrestricted file upload. The attack may be launched remotely, and the exploit has been disclosed publicly.