CVE-2021-44088

An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters...

Remote code execution

A Remote Code Execution RCE vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an unauthenticated remote attacker to upload a maliciously crafted PHP via photo upload...

CVE-2021-44087

A Remote Code Execution RCE vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an unauthenticated remote attacker to upload a maliciously crafted PHP via photo upload...

CVE-2021-44087

The CVE-2021-44087 entry affects Sourcecodester Attendance and Payroll System v1.0, describing an unauthenticated RCE via uploading a malicious PHP file through the photo upload mechanism. The underlying issue is improper handling of uploaded content in the photo upload functionality, enabling re...

CVE-2021-44088

An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters...

CVE-2021-44088

The CVE pertains to Sourcecodester Attendance and Payroll System v1.0, where an SQL Injection vulnerability allows a remote attacker to bypass authentication through unsanitized login parameters. The vulnerability affects the web app’s login flow (PHP/MySQLi variants appear in related sources) an...

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code from oretnom23 individual developers. sourcecodester Attendance and Payroll System is vulnerable to SQL injection, which can be exploited by remote attackers to bypass authentication via unprocessed log...

Attendance and Payroll System 安全漏洞

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code by oretnom23 individual developers. sourcecodester Attendance and Payroll System is vulnerable to remote code execution, which can be exploited by attackers to upload maliciously crafted PHP...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

Authorization

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

PT-2022-15505 · Sap · Sap Erp Hcm Portugal

Name of the Vulnerable Software and Affected Versions: SAP ERP HCM Portugal versions 600 through 608 Description: The issue concerns a report that reads payroll data of employees in a certain area without performing necessary authorization checks. This allows an attacker to access payroll...

Kronos Still Dragging Itself Back From Ransomware Hell

Remember when Kronos, the workforce-management workhorse, got whacked by ransomware in December, right in time to gum up end-of-year HR busywork such as bonuses and vacation tracking? Could take days to crawl back, Ultimate Kronos Group UKG said at the time. Or, then again, could take up to sever...

Why Payroll Is The Next Company Security Battleground?

By Owais Sultan One recent example of an HR and payroll service provider who suffered a cyber attack just a couple of days ago is Kronos. This is a post from HackRead.com Read the original post: Why Payroll Is The Next Company Security Battleground?...

Kronos Ransomware Outage Drives Widespread Payroll Chaos

Kronos, the workforce management platform, has been hit with a ransomware attack that it says will leave its cloud-based services unavailable for several weeks – and it’s suggesting that customers seek other ways to get payroll and other HR tasks accomplished. The outage has left cataclysmic issu...

Aifu 艾富资讯出纳帐务管理系统 安全漏洞

Aifu Aifu Information Cashier Accounts Management System is a management system of China Aifu Information Aifu Company. It is used for managing accounts. The Aifu Cashier Accounts Management System is vulnerable to an authorization issue, which arises from the lack of a flawed restriction on the...

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...