CVE-2022-28009

The CVE-2022-28009 issue concerns Attendance and Payroll System v1.0, where a SQL injection vulnerability exists in the PHP component admin/attendance_delete.php. The root cause is lack of input validation for external SQL statements, enabling attackers to execute unauthorized queries and potenti...

CVE-2022-28010

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...

CVE-2022-28009

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

CVE-2022-28011

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...

CVE-2022-28011

CVE-2022-28011 affects Attendance and Payroll System v1.0 with a SQL injection vulnerability exploitable via the component admin\schedule_delete.php. The root cause is lack of input validation in the SQL statement, allowing an attacker to manipulate or exfiltrate database data. Exploitation detai...

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

CVE-2022-28013

Attendance and Payroll System v1.0 is affected by an SQL injection in the component admin\schedule_employee_edit.php. The root cause is lack of validation of external input to SQL statements, allowing an attacker to inject arbitrary SQL commands. Public descriptions across multiple sources (CNVD/...

CVE-2022-28013

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...

CVE-2022-28015

The CVE-2022-28015 entry affects Attendance and Payroll System v1.0, vulnerable due to a SQL injection in the component path admin/cashadvance_edit.php (or admincashadvance_edit.php depending on source). The root cause is lack of input validation for external input SQL statements in that PHP/MySQ...

CVE-2022-28014

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendanceedit.php...

CVE-2022-28014

CVE-2022-28014 affects Attendance and Payroll System v1.0. The vulnerability is a SQL injection in the component admin/attendance_edit.php caused by insufficient input validation, enabling attackers to execute arbitrary SQL and access sensitive database data. No exploitation details are provided ...

CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...

CVE-2022-28016

Attendance and Payroll System v1.0 contains a SQL injection vulnerability in the admin\deduction_edit.php component. The root cause, as described by CNVD and other sources, is lack of input validation for external SQL statements, allowing an attacker to execute arbitrary SQL and potentially acces...

CVE-2022-28017

CVE-2022-28017 affects Attendance and Payroll System v1.0 (PHP/MySQL) with a SQL injection in the component admin/overtime_edit.php due to lack of input validation. This root cause permits crafting SQL statements to access/modify database data. The public documents do not provide a concrete remed...

CVE-2022-28018

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleedit.php...

CVE-2022-28018

Attendance and Payroll System v1.0 is affected by a SQL injection in the admin\schedule_edit.php component. The root cause is lack of input validation in that PHP script, enabling attackers to manipulate SQL statements and potentially access sensitive database data. The vulnerability is documente...

CVE-2022-28017

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimeedit.php...

CVE-2022-28019

CVE-2022-28019 affects Attendance and Payroll System v1.0; vulnerability is a SQL injection in component \admin\employee_edit.php caused by lack of input validation. Documents indicate this can be exploited to execute arbitrary SQL commands to access potentially sensitive data. CVSS details from ...

CVE-2022-28020

CVE-2022-28020 affects Attendance and Payroll System v1.0, with a SQL injection vulnerability in the component \admin\position_edit.php due to insufficient input validation. Multiple connected sources confirm the flaw originates from this PHP/MySQLi-based code path, enabling potential unauthorize...