[ CVE-2026-122050 · Published 5 Nov 2026 ]

Vulnerability in Campcodes Complete Sales and Inventory System with Credit Management

CVSS 7.3 No fix listed yet

[ Description ]Official description

A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.