3 matches found
CVE-2022-28011
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...
CVE-2022-28011
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...
CVE-2022-28011
CVE-2022-28011 affects Attendance and Payroll System v1.0 with a SQL injection vulnerability exploitable via the component admin\schedule_delete.php. The root cause is lack of input validation in the SQL statement, allowing an attacker to manipulate or exfiltrate database data. Exploitation detai...