959 matches found
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...
CVE-2022-28006
CVE-2022-28006 affects the Attendance and Payroll System v1.0 (PHP/MySQLi). The vulnerability is a SQL injection in the component admin\employee_delete.php , arising from lack of input validation, enabling attackers to execute arbitrary SQL on the database and potentially exfiltrate data. The CVS...
CVE-2022-28007
CVE-2022-28007 affects the Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the PHP file admin/cashadvance_delete.php, arising from lack of input validation in the component that handles cash advance deletion. Impact is described as data exposure of the database; no exp...
CVE-2022-28008
CVE-2022-28008 describes a SQL injection in Attendance and Payroll System v1.0, exploitable through the admin\attendance_delete.php component. The vulnerability can affect confidentiality, integrity, and availability (CVSSv3.1 base score 8.8; CVSSv2 6.5). Connected sources confirm the same issue ...
CVE-2022-28008
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...
CVE-2022-28007
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...
CVE-2022-28009
The CVE-2022-28009 issue concerns Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the PHP component admin/attendance_delete.php. The root cause is lack of input validation for external SQL statements, enabling attackers to execute unauthorized queries and potenti...
CVE-2022-28010
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...
CVE-2022-28010
The CVE-2022-28010 entry affects Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the component admin/overtime_delete.php. The root cause is lack of input validation allowing external SQL statements to be executed, potentially exposing sensitive database data. Doc...
CVE-2022-28009
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...
CVE-2022-28011
CVE-2022-28011 affects Attendance and Payroll System v1.0 with a SQL injection vulnerability exploitable via the component admin\schedule_delete.php. The root cause is lack of input validation in the SQL statement, allowing an attacker to manipulate or exfiltrate database data. Exploitation detai...
CVE-2022-28011
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...
CVE-2022-28012
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...
CVE-2022-28013
Attendance and Payroll System v1.0 is affected by an SQL injection in the component admin\schedule_employee_edit.php. The root cause is lack of validation of external input to SQL statements, allowing an attacker to inject arbitrary SQL commands. Public descriptions across multiple sources (CNVD/...