Product
Campcodes Complete Advance Loan Management System 1.0 contains an unrestricted file upload vulnerability in /loan/application/banner.php via the image argument.