CVE-2026-122048: Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection
A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Campcodes Division Regional Athletic Meet Game Result Matrix System versions up to and including 2.1 are identified as affected, specifically where the /dipam/check-user.php endpoint is reachable.
What does an attacker need to exploit it?
The attack can be performed remotely without privileges or user interaction by manipulating the abbr argument handled by /dipam/check-user.php. A public exploit is available.
What is the potential impact of successful exploitation?
Successful SQL injection may affect confidentiality, integrity, and availability, each rated low in the supplied vector.