CVE-2026-122050Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

6.9 MEDIUMEPSS 0.26%Not in KEVNVD: Deferred

Last updated: 2026-11-05 21:18 UTC

OverviewCVSS details

6.9MEDIUMCVSS 4.0

Score source: VulDB (CNA)
NVD status: Deferred
Published: Nov 5, 2026
Assigner: VulDB

Affected

Complete Sales and Inventory System with Credit Management (Campcodes)

Versions: 1.0

Exploitation

Public exploit: Yes · 1 reference
CISA KEV: Not listed
KEV due date: —
SSVC: Exploitation poc · Automatable yes · Impact partial

EPSS · FIRST, scored Nov 7

0.26%chance of exploitation in 30 days

Higher than 18.21% of CVEs

CVSS 4.0 · VulDB (CNA)

6.9Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Attack vector: Network
Attack complexity: Low
Attack requirements: None
Privileges required: None
User interaction: None
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low
Confidentiality (other systems): None
Integrity (other systems): None
Availability (other systems): None

CVSS 4.0 · VulDB (CNA)

5.5Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Attack vector: Network
Attack complexity: Low
Attack requirements: None
Privileges required: None
User interaction: None
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low
Confidentiality (other systems): None
Integrity (other systems): None
Availability (other systems): None

CVSS 3.1 · VulDB (CNA)

7.3High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low

CVSS 3.1 · VulDB (CNA)

7.3High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low

CVSS 3.0 · VulDB (CNA)

7.3High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low

CVSS 2.0 · VulDB (CNA)

7.5High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack vector: Network
Attack complexity: Low
Authentication: None
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

CVSS 2.0 · VulDB (CNA)

7.5High

AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C

Attack vector: Network
Attack complexity: Low
Authentication: None
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

NVD status: Deferred

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
6.9	MEDIUM	4.0VulDB (CNA)	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5.5	MEDIUM	4.0VulDB (CNA)	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
7.3	HIGH	3.1VulDB (CNA)	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.3	HIGH	3.1VulDB (CNA)	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
7.3	HIGH	3.0VulDB (CNA)	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
7.5	HIGH	2.0VulDB (CNA)	AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5	HIGH	2.0VulDB (CNA)	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C

Details

CVE ID: CVE-2026-122050
Status: Deferred
Assigner (CNA): VulDB
Published: Nov 5, 2026
Last modified: 2026-11-05 21:18 UTC
Weaknesses: CWE-89 · SQL Injection
CWE-74 · Injection

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 09:28 UTC.