Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimeedit.php...

CVE-2022-28017

CVE-2022-28017 affects Attendance and Payroll System v1.0 (PHP/MySQL) with a SQL injection in the component admin/overtime_edit.php due to lack of input validation. This root cause permits crafting SQL statements to access/modify database data. The public documents do not provide a concrete remed...