CVE-2024-5898

CVE-2024-5898 affects itsourcecode Payroll Management System v1.0. The vulnerable component is the file print_payroll.php, where manipulation of the argument id leads to an SQL injection. The vulnerability can be exploited remotely and the exploit has been publicized. Multiple sources corroborate...

Payroll Management System SQL Injection Vulnerability

Payroll Management System is a payroll management system developed by Carlo Montero. A SQL injection vulnerability exists in Payroll Management System version 1.0, which stems from the inclusion of some unknown functions in printpayroll.php that cause SQL injection via the parameter id...

PT-2024-37233 · Unknown · Itsourcecode Payroll Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Payroll Management System version 1.0 Description: A critical issue was found in the itsourcecode Payroll Management System, affecting some unknown functionality of the file print payroll.php. The manipulation of the id argument...

CVE-2024-36049

Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connection. This allows attackers in a machine-in-the-middle position read and write access to personal...

CVE-2024-36049

Versions of Aptos Wisal payroll accounting prior to 7.1.6 are vulnerable to unauthorized data access due to the use of hardcoded credentials in the Windows client. The application fetches a complete list of usernames and passwords from the database server over an unencrypted connection . This fla...

CVE-2024-36049

Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connection. This allows attackers in a machine-in-the-middle position read and write access to personal...

CVE-2024-36049

Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connection. This allows attackers in a machine-in-the-middle position read and write access to personal...

Aptos Wisal payroll 安全漏洞

Aptos Wisal payroll is an enterprise resource planning ERP solution from Aptos Luxembourg focused on the retail industry. A security vulnerability exists in Aptos Wisal payroll versions prior to 7.1.6 that stems from the use of hard-coded credentials. An attacker exploited the vulnerability to...

PT-2024-26862 · Aptos +1 · Aptos Wisal Payroll Accounting +1

Name of the Vulnerable Software and Affected Versions: Aptos Wisal payroll accounting versions prior to 7.1.6 Description: The issue allows attackers in a machine-in-the-middle position to gain read and write access to personally identifiable information PII and payroll data. It also enables them...

Exploit for Unrestricted Upload of File with Dangerous Type in Oretnom23 Payroll_Management_System

CVE-2024-34833 Payroll Management System RCE Unauthenticated...

Exploit for Unrestricted Upload of File with Dangerous Type in Oretnom23 Payroll_Management_System

CVE-2024-34833 Payroll Management System RCE Unauthenticated...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

Employees Payroll Management System 安全漏洞

Employees Payroll Management System is an employee payroll management system by Carlo Montero Personal Developer. A security vulnerability exists in Employees Payroll Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2023-23022

CVE-2023-23022 is an XSS vulnerability in sourcecodester Oretnom23 Employee's Payroll Management System 1.0. The flaw resides in Main.php and allows crafting input in the fields code, title, from_date, and to_date to trigger arbitrary code execution via the web interface. The issue is confirmed a...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

PT-2023-9578 · Oracle · Peoplesoft Enterprise Hcm Global Payroll Core

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Global Payroll Core versions 9.2.48 through 9.2.50 Description: The issue is related to weaknesses in the authorization mechanism of the Global Payroll for Core component. This can allow a remote attacker to gain...

Vulnerabilities fixed in Oracle PeopleSoft

Vulnerabilities have been fixed in Oracle PeopleSoft. The vulnerabilities allow a malicious party to carry out attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Access to sensitive data Oracle has fixed the vulnerabilities in the following...

Telindus Apsal 安全漏洞

Telindus Apsal is a software for simplified payroll calculation from Telindus Belgium. A security vulnerability exists in Telindus Apsal version 3.14.2022.235 b. An attacker could exploit the vulnerability to perform unauthorized operations...