Payroll Management System SQL Injection Vulnerability (CNVD-2025-06475)

Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0 due to a lack of validation of externally entered SQL statements in the parameter emptype. An attacker can exploit this vulnerability to execute illegal SQL...

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter rate that can lead to SQL injection...

CVE-2025-3038

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-3039

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-2985

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-2984

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-3038

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-3039

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-3038

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-3039

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-3039 code-projects Payroll Management System add_employee.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-3039

CVE-2025-3039 corresponds to a SQL injection in Code-Projects Payroll Management System 1.0, triggered by manipulating the lname and fname arguments in an unknown function of /add_employee.php. Multiple connected sources confirm remote exploitation is possible and that other parameters may also b...

CVE-2025-3039 code-projects Payroll Management System add_employee.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-3038

The CVE-2025-3038 entry applies to code-projects Payroll Management System 1.0. The vulnerability resides in the /view_account.php handling of the salary_rate parameter, enabling SQL injection. It is described as exploitable remotely and publicly disclosed. Affected component appears to be the pa...

CVE-2025-3038 code-projects Payroll Management System view_account.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-3038 code-projects Payroll Management System view_account.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewaccount.php. The manipulation of the argument salaryrate leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-2985

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-2984

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-2984

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-2985

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...