A security vulnerability in Campcodes Complete Advance Loan Management System 1.0 allows remote attackers to perform unrestricted file uploads via the move_uploaded_file function in /loan/application/banner.php. This vulnerability has a CVSS score of 7.3, indicating high severity, and the exploit has been publicly disclosed.