CVE-2026-122047 in Complete Advance Loan Management System

Prediction

by VulDB Data Team • 11/04/2026

A security vulnerability has been detected in <a href="/product/campcodes:complete_advance_loan_management_system">Campcodes Complete Advance Loan Management System 1.0</a>. This affects the function <code>move_uploaded_file</code> of the file <em>/loan/application/banner.php</em>. Such manipulation of the argument <em>image</em> leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-431115
• CPE: VulDB
• CWE: CWE-434 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-122047
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-122047
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-122047/