CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

CVE-2022-28015

The CVE-2022-28015 entry affects Attendance and Payroll System v1.0, vulnerable due to a SQL injection in the component path admin/cashadvance_edit.php (or admincashadvance_edit.php depending on source). The root cause is lack of input validation for external input SQL statements in that PHP/MySQ...