EUVD-2026-117196

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function randomint of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

EUVD-2026-117197

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out...

EUVD-2026-117195

A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible to launch the attack remotely. The...

EUVD-2026-117189

A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function moveuploadedfile of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2026-122050

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out...

CVE-2026-122049

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function randomint of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

CVE-2026-122050

A SQL injection vulnerability exists in Campcodes Complete Sales and Inventory System with Credit Management 1.0 . The flaw is located in the processing of the /ahira/login.php file, where manipulating the branch argument allows for remote execution of unauthorized SQL commands. Public exploits f...

CVE-2026-122050 Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out...

CVE-2026-122048

A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2026-122047

A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function moveuploadedfile of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2026-122049

The Campcodes Bitcoin Wallet System 1.0 is vulnerable to an improper restriction of excessive authentication attempts due to a flaw in the random_int function within the core/app/Http/Controllers/Auth/ForgotPasswordController.php file. This vulnerability allows for remote exploitation, though the...

CVE-2026-122049 Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function randomint of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

CVE-2026-122048 Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection

A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2026-122048

A vulnerability exists in the Campcodes Division Regional Athletic Meet Game Result Matrix System (up to version 2.1 ). The flaw is located in an unknown function within the /dipam/check-user.php file. Attackers can perform a remote SQL injection by manipulating the abbr argument. An exploit is p...

CVE-2026-122047

The Campcodes Complete Advance Loan Management System 1.0 is vulnerable to an unrestricted upload vulnerability. The flaw exists in the move_uploaded_file function within the file /loan/application/banner.php , where manipulation of the image argument allows for unauthorized file uploads. This at...

PT-2026-137239

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out...

PT-2026-137238

A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is...

PT-2026-137237

A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible to launch the attack remotely. The...

PT-2026-137229

A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move uploaded file of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. Th...

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...