4 matches found
CVE-2022-28007
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...
CVE-2022-28007
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...
CVE-2022-28007
CVE-2022-28007 affects the Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the PHP file admin/cashadvance_delete.php, arising from lack of input validation in the component that handles cash advance deletion. Impact is described as data exposure of the database; no exp...