CVE-2022-28018

Attendance and Payroll System v1.0 is affected by a SQL injection in the admin\schedule_edit.php component. The root cause is lack of input validation in that PHP script, enabling attackers to manipulate SQL statements and potentially access sensitive database data. The vulnerability is documente...