Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendanceedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimeedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...

CVE-2022-28006

CVE-2022-28006 affects the Attendance and Payroll System v1.0 (PHP/MySQLi). The vulnerability is a SQL injection in the component admin\employee_delete.php , arising from lack of input validation, enabling attackers to execute arbitrary SQL on the database and potentially exfiltrate data. The CVS...

CVE-2022-28008

CVE-2022-28008 describes a SQL injection in Attendance and Payroll System v1.0, exploitable through the admin\attendance_delete.php component. The vulnerability can affect confidentiality, integrity, and availability (CVSSv3.1 base score 8.8; CVSSv2 6.5). Connected sources confirm the same issue ...

CVE-2022-28007

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...

CVE-2022-28008

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

CVE-2022-28007

CVE-2022-28007 affects the Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the PHP file admin/cashadvance_delete.php, arising from lack of input validation in the component that handles cash advance deletion. Impact is described as data exposure of the database; no exp...

CVE-2022-28009

The CVE-2022-28009 issue concerns Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the PHP component admin/attendance_delete.php. The root cause is lack of input validation for external SQL statements, enabling attackers to execute unauthorized queries and potenti...

CVE-2022-28010

The CVE-2022-28010 entry affects Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the component admin/overtime_delete.php. The root cause is lack of input validation allowing external SQL statements to be executed, potentially exposing sensitive database data. Doc...

CVE-2022-28010

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...

CVE-2022-28009

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...