CVE-2026-122050

EUVD-2026-117197
A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 18.23%
Common Weakness Enumeration
References
https://tracexlabs.com/releases/campcodes-complete-sales-and-inventory-system-login-sqli.html
https://vuldb.com/cve/CVE-2026-122050
https://vuldb.com/submit/1025183
https://vuldb.com/vuln/431128
https://vuldb.com/vuln/431128/cti
https://www.campcodes.com/