Skip to content
Threat Feed
Subscribe
high advisory

Campcodes Division Regional Athletic Meet Game Result Matrix System: SQL injection (CVE-2026-122048)

A SQL injection vulnerability in the Division Regional Athletic Meet Game Result Matrix System allows remote attackers to execute arbitrary database commands via the abbr parameter in check-user.php.

CVE search metadata

CVE search record: CVE-2026-122048. Severity: high. CVSS: 7.3. KEV: no. Product: Division Regional Athletic Meet Game Result Matrix System (<= 2.1). Brief: Campcodes Division Regional Athletic Meet Game Result Matrix System: SQL injection (CVE-2026-122048). Brief link: https://feed.craftedsignal.io/briefs/2026-11-campcodes-sqli/

Triage facts

Revision 1
Applicability
Division Regional Athletic Meet Game Result Matrix System (<= 2.1)
Evidence
Unknown
Severity
High
Action
Elevated
Sources
1 public source
Freshness
Revision 1Nov 5, 00:07 UTC
Detection
1 rule
Vulnerabilities
1 CVE
Source quality
A1Likely

A SQL injection vulnerability (CVE-2026-122048) exists in Campcodes Division Regional Athletic Meet Game Result Matrix System versions 2.1 and earlier. The vulnerability is located in the /dipam/check-user.php script. An attacker can manipulate the abbr parameter to inject malicious SQL commands, enabling unauthorized database access. Exploitation is possible remotely and functional exploit code is publicly available.

Impact

Successful exploitation allows for unauthorized database interaction, which may lead to data exfiltration, modification, or destruction depending on the database user permissions.

Recommendation

  • Inventory all instances of the Campcodes Division Regional Athletic Meet Game Result Matrix System to identify versions 2.1 and earlier.
  • Apply the vendor-provided patch if available, or restrict access to the /dipam/ directory.
  • Monitor web server access logs for anomalous payloads in the 'abbr' parameter of 'check-user.php' requests.

Immediate actions

Patch or restrict access to /dipam/check-user.php

IT Operations 24h

Threat Hunt

Inspect web server logs for requests to check-user.php containing SQL keywords or character sequences (e.g., --, OR 1=1)

T1190 high high confidence hunt now

Data: web_access_logs

Mitigations

Implement WAF rules to filter malicious payloads in the abbr parameter

immediate SOC

CVE-2026-122048

Detection coverage 1

Detect CVE-2026-122048 Exploitation - SQL Injection in check-user.php

high

Detects exploitation attempts targeting the abbr parameter in check-user.php using common SQL injection syntax.

sigma tactics: initial_access techniques: T1190 sources: webserver

Detection queries are available on the platform. Get full rules →