Complete Advance Loan Management System unrestricted file upload

Summary

Campcodes Complete Advance Loan Management System 1.0 does not restrict uploads in banner.php, so a remote attacker can upload files. The record says public exploit code exists.

What to do

We have not confirmed a fixed version yet. Check the source links below.

Products and platforms

• Campcodes Complete Advance Loan Management System

CVE IDs

• CVE-2026-122047 (opens in a new tab)

Sources

• Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · tracexlabs.com (opens in a new tab)
• CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-04 22:45 UTC

First seen 2026-11-09 16:20 UTC