{"id":"CVE-2026-122050","title":"Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection","summary":"A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in s…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-89","CWE-74"],"vendor":"Campcodes","product":"Complete Sales and Inventory System with Credit Management","affected":["complete_sales_and_inventory_system_with_credit_management 1.0"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-05T20:29:42.907128Z"},"exploitAvailable":true,"published":"2026-11-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:29:51.683Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-122050","references":[{"url":"https://vuldb.com/vuln/431128","label":"VDB-431128 | Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection"},{"url":"https://vuldb.com/vuln/431128/cti","label":"VDB-431128 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-122050","label":"CVE-2026-122050 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1025183","label":"Submit #1025183 | CampCodes Complete Sales and Inventory System with Credit Management 1.0 SQL Injection"},{"url":"https://tracexlabs.com/releases/campcodes-complete-sales-and-inventory-system-login-sqli.html"},{"url":"https://www.campcodes.com/"}],"tags":["cve.org","exploit-available"],"epss":0.00263,"epssPercentile":0.18233,"ingestedAt":"2026-11-05T22:38:31.794Z","slug":"CVE-2026-122050","body":"## Overview\n\nA vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.\n\n## Affected\n\n- `complete_sales_and_inventory_system_with_credit_management 1.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}