CVE-2023-1852

A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/deductionedit.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2023-1852 SourceCodester Online Payroll System deduction_edit.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/deductionedit.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 contains a SQL injection vulnerability in the admin\deduction_edit.php component. The root cause, as described by CNVD and other sources, is lack of input validation for external SQL statements, allowing an attacker to execute arbitrary SQL and potentially acces...

CVE-2022-28016: Improper Neutralization of Special Elements used in an SQL Command

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...