CVE-2024-10421

CVE-2024-10421 affects SourceCodester Attendance and Payroll System 1.0. Affects code in the file /admin/overtime_row.php where manipulating the id parameter leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed publicly. Reported impacts indicate potenti...

CVE-2024-10421 SourceCodester Attendance and Payroll System overtime_row.php sql injection

A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtimerow.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10420

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2024-10420

SourceCodester Attendance and Payroll System 1.0 is affected by a vulnerability in the upload function of /marimar/guest/update.php where the image parameter can be manipulated to cause unrestricted file upload. This can be exploited remotely, and multiple sources confirm the exploit has been pub...

CVE-2024-10420 SourceCodester Attendance and Payroll System update.php upload unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2024-10420 SourceCodester Attendance and Payroll System update.php upload unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. T...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code Attendance and Payroll System by oretnom23. An SQL injection vulnerability exists in Attendance and Payroll System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /admin/overtimerow.php page...

SourceCodester Payroll Management System 安全漏洞

SourceCodester Payroll Management System is an open source payroll management system from SourceCodester. A security vulnerability exists in SourceCodester Payroll Management System version 1.0. An attacker exploiting this vulnerability could cause a buffer overflow...

CVE-2024-7119

A vulnerability, which was classified as critical, has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this issue is some unknown functionality of the file /employeeviewmore.php. The manipulation of the argument id leads to sql injection. The attack may...

CVE-2024-7117

A vulnerability classified as critical has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected is an unknown function of the file /shiftviewmore.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-7118

A vulnerability classified as critical was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this vulnerability is an unknown functionality of the file /departmentviewmore.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-7115

A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as critical. This vulnerability affects unknown code of the file /designationviewmore.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

Online-Payroll-Management-System SQL注入漏洞

Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...

Online-Payroll-Management-System SQL注入漏洞

Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...

Online-Payroll-Management-System SQL注入漏洞

Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...

Online-Payroll-Management-System SQL注入漏洞

Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...

Payroll Management System SQL Injection Vulnerability

Payroll Management System is a payroll management system by Carlo Montero Personal Developer. Itsourcecode Payroll Management System version 1.0 suffers from a SQL injection vulnerability that originates from the inclusion of an unknown function in payrollitems.php, which leads to SQL injection v...

Employees Payroll Management System 安全漏洞

Employees Payroll Management System is an employee payroll management system by Carlo Montero Personal Developer. A security vulnerability exists in Employees Payroll Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code...

Online Payroll System Cross-Site Scripting Vulnerability (CNVD-2023-29397)

Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System, which stems from the lack of effective filtering and escaping of user-supplied data in /admin/deductionedit.php, and can be exploited by attackers to execute...

Online Payroll System SQL Injection Vulnerability (CNVD-2023-29398)

Online Payroll System is a system for distributing payroll online. Online Payroll System v1.0 version has SQL injection vulnerability, the vulnerability originates from the /admin/deductionrow.php parameter id lack of validation of external input SQL statements, an attacker can use this...