Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-5561

Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsController.php of the component Environment Variable Handler. Executing a manipulation can lead to injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Campcodes Complete POS Management and Inventory System

  • 4.0.0affected
  • 4.0.1affected
  • 4.0.2affected
  • 4.0.3affected
  • 4.0.4affected
  • 4.0.5affected
  • 4.0.6affected

References