CVE-2022-28007

CVE-2022-28007 affects the Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the PHP file admin/cashadvance_delete.php, arising from lack of input validation in the component that handles cash advance deletion. Impact is described as data exposure of the database; no exp...

CVE-2022-28010

The CVE-2022-28010 entry affects Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the component admin/overtime_delete.php. The root cause is lack of input validation allowing external SQL statements to be executed, potentially exposing sensitive database data. Doc...

CVE-2022-28009

The CVE-2022-28009 issue concerns Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the PHP component admin/attendance_delete.php. The root cause is lack of input validation for external SQL statements, enabling attackers to execute unauthorized queries and potenti...

CVE-2022-28010

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...

CVE-2022-28009

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

CVE-2022-28011

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...

CVE-2022-28011

CVE-2022-28011 affects Attendance and Payroll System v1.0 with a SQL injection vulnerability exploitable via the component admin\schedule_delete.php. The root cause is lack of input validation in the SQL statement, allowing an attacker to manipulate or exfiltrate database data. Exploitation detai...

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

CVE-2022-28013

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...

CVE-2022-28013

Attendance and Payroll System v1.0 is affected by an SQL injection in the component admin\schedule_employee_edit.php. The root cause is lack of validation of external input to SQL statements, allowing an attacker to inject arbitrary SQL commands. Public descriptions across multiple sources (CNVD/...

CVE-2022-28014

CVE-2022-28014 affects Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the component admin/attendance_edit.php caused by insufficient input validation, enabling attackers to execute arbitrary SQL and access sensitive database data. No exploitation details are provided ...

CVE-2022-28015

The CVE-2022-28015 entry affects Attendance and Payroll System v1.0, vulnerable due to a SQL injection in the component path admin/cashadvance_edit.php (or admincashadvance_edit.php depending on source). The root cause is lack of input validation for external input SQL statements in that PHP/MySQ...

CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

CVE-2022-28014

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendanceedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 contains a SQL injection vulnerability in the admin\deduction_edit.php component. The root cause, as described by CNVD and other sources, is lack of input validation for external SQL statements, allowing an attacker to execute arbitrary SQL and potentially acces...

CVE-2022-28017

CVE-2022-28017 affects Attendance and Payroll System v1.0 (PHP/MySQL) with a SQL injection in the component admin/overtime_edit.php due to lack of input validation. This root cause permits crafting SQL statements to access/modify database data. The public documents do not provide a concrete remed...

CVE-2022-28017

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimeedit.php...

CVE-2022-28018

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleedit.php...

CVE-2022-28018

Attendance and Payroll System v1.0 is affected by a SQL injection in the admin\schedule_edit.php component. The root cause is lack of input validation in that PHP script, enabling attackers to manipulate SQL statements and potentially access sensitive database data. The vulnerability is documente...