Lucene search
+L

932 matches found

CNNVD
CNNVD
added 2025/03/23 12:0 a.m.6 views

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...

7.5CVSS7.1AI score0.00369EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/02/14 5:15 a.m.13 views

CVE-2024-36049

Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connection. This allows attackers in a machine-in-the-middle position read and write access to personal...

6.5CVSS6.5AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:38 p.m.8 views

CVE-2024-8081

A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS7.2AI score0.00606EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:30 p.m.12 views

CVE-2024-8567

A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletedeductions. The manipulation of the argument id leads to sql injection. The attack may be initiated...

9.8CVSS7.4AI score0.00701EPSS
SaveExploits1References1
Wired Threat Level
Wired Threat Level
added 2024/10/31 9:30 a.m.15 views

The Untold Story of Trump's Failed Attempt to Overthrow Venezuela's President

A successful CIA hack of Venezuela's military payroll system, insider fights for spy agency resources, and messy opposition politics: A WIRED investigation reveals a secret Trump-era attempt to oust autocratic ruler Nicolás Maduro...

7.3AI score
SaveExploits0
CVE
CVE
added 2024/10/27 5:31 p.m.68 views

CVE-2024-10422

CVE-2024-10422 affects SourceCodester Attendance and Payroll System v1.0. The vulnerability is an SQL injection in the parameter id of /admin/overtime_add.php, exploitable remotely. Multiple sources (NVD, Red Hat, CVE Record, CNNVD, VulnEnrichment, etc.) confirm the issue and its critical severit...

9.8CVSS7.1AI score0.00414EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/10/27 5:31 p.m.19 views

CVE-2024-10422 SourceCodester Attendance and Payroll System overtime_add.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtimeadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

6.5CVSS0.00414EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/27 5:15 p.m.11 views

CVE-2024-10421

A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtimerow.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00398EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/10/27 5:0 p.m.8 views

CVE-2024-10421 SourceCodester Attendance and Payroll System overtime_row.php sql injection

A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtimerow.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS6.9AI score0.00398EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/27 5:0 p.m.22 views

CVE-2024-10421 SourceCodester Attendance and Payroll System overtime_row.php sql injection

A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtimerow.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS0.00398EPSS
SaveExploits0References5
CVE
CVE
added 2024/10/27 5:0 p.m.48 views

CVE-2024-10421

CVE-2024-10421 affects SourceCodester Attendance and Payroll System 1.0. Affects code in the file /admin/overtime_row.php where manipulating the id parameter leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed publicly. Reported impacts indicate potenti...

9.8CVSS7.1AI score0.00398EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/10/27 4:15 p.m.3 views

CVE-2024-10420

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

9.8CVSS6.3AI score
SaveExploits0References5
NVD
NVD
added 2024/10/27 4:15 p.m.21 views

CVE-2024-10420

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

9.8CVSS0.00474EPSS
SaveExploits0References5
CVE
CVE
added 2024/10/27 3:31 p.m.48 views

CVE-2024-10420

SourceCodester Attendance and Payroll System 1.0 is affected by a vulnerability in the upload function of /marimar/guest/update.php where the image parameter can be manipulated to cause unrestricted file upload. This can be exploited remotely, and multiple sources confirm the exploit has been pub...

9.8CVSS6.8AI score0.00474EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/10/27 3:31 p.m.30 views

CVE-2024-10420 SourceCodester Attendance and Payroll System update.php upload unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

6.5CVSS0.00474EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/10/27 3:31 p.m.9 views

CVE-2024-10420 SourceCodester Attendance and Payroll System update.php upload unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

6.5CVSS6.5AI score0.00474EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/27 12:0 a.m.5 views

PT-2024-16267 · Unknown · Sourcecodester Attendance/Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Attendance and Payroll System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /admin/overtime add.php. The manipulation of the id argument leads to SQL injection. The...

9.8CVSS7.1AI score0.00414EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.6 views

Attendance and Payroll System 代码问题漏洞

Attendance and Payroll System is a PHP/MySQLi source code Attendance and Payroll System by oretnom23. A code issue vulnerability exists in Attendance and Payroll System version 1.0, which stems from an unrestricted file upload vulnerability in the image parameter of the /marimar/guest/update.php...

9.8CVSS6.7AI score0.00474EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.9 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code Attendance and Payroll System by oretnom23. An SQL injection vulnerability exists in Attendance and Payroll System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /admin/overtimerow.php page...

9.8CVSS7.1AI score0.00398EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/25 2:15 a.m.17 views

CVE-2024-10371

A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used...

9.8CVSS0.00726EPSS
SaveExploits1References5
Rows per page
Query Builder