CVE-2022-28011

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...

CVE-2022-28011

CVE-2022-28011 affects Attendance and Payroll System v1.0 with a SQL injection vulnerability exploitable via the component admin\schedule_delete.php. The root cause is lack of input validation in the SQL statement, allowing an attacker to manipulate or exfiltrate database data. Exploitation detai...

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

CVE-2022-28013

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...

CVE-2022-28013

Attendance and Payroll System v1.0 is affected by an SQL injection in the component admin\schedule_employee_edit.php. The root cause is lack of validation of external input to SQL statements, allowing an attacker to inject arbitrary SQL commands. Public descriptions across multiple sources (CNVD/...

CVE-2022-28014

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendanceedit.php...

CVE-2022-28014

CVE-2022-28014 affects Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the component admin/attendance_edit.php caused by insufficient input validation, enabling attackers to execute arbitrary SQL and access sensitive database data. No exploitation details are provided ...

CVE-2022-28015

The CVE-2022-28015 entry affects Attendance and Payroll System v1.0, vulnerable due to a SQL injection in the component path admin/cashadvance_edit.php (or admincashadvance_edit.php depending on source). The root cause is lack of input validation for external input SQL statements in that PHP/MySQ...

CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 contains a SQL injection vulnerability in the admin\deduction_edit.php component. The root cause, as described by CNVD and other sources, is lack of input validation for external SQL statements, allowing an attacker to execute arbitrary SQL and potentially acces...

CVE-2022-28017

CVE-2022-28017 affects Attendance and Payroll System v1.0 (PHP/MySQL) with a SQL injection in the component admin/overtime_edit.php due to lack of input validation. This root cause permits crafting SQL statements to access/modify database data. The public documents do not provide a concrete remed...

CVE-2022-28018

Attendance and Payroll System v1.0 is affected by a SQL injection in the admin\schedule_edit.php component. The root cause is lack of input validation in that PHP script, enabling attackers to manipulate SQL statements and potentially access sensitive database data. The vulnerability is documente...

CVE-2022-28019

CVE-2022-28019 affects Attendance and Payroll System v1.0; vulnerability is a SQL injection in component \admin\employee_edit.php caused by lack of input validation. Documents indicate this can be exploited to execute arbitrary SQL commands to access potentially sensitive data. CVSS details from ...

CVE-2022-28020

CVE-2022-28020 affects Attendance and Payroll System v1.0, with a SQL injection vulnerability in the component \admin\position_edit.php due to insufficient input validation. Multiple connected sources confirm the flaw originates from this PHP/MySQLi-based code path, enabling potential unauthorize...

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminschedule edit.php lacks validation of external input S...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminovertime delete.php lacks validation of external input...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admindeductionedit.php lacks validation for external inpu...