CVE-2023-1853

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of the file /admin/employeeedit.php. The manipulation of the argument of leads to cross site scripting. The attack may be initiated remotely...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2022-28009

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

CVE-2022-28006

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeedelete.php...

CVE-2022-28468

Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-28016

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deductionedit.php...

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...

CVE-2022-28018

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleedit.php...

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

CVE-2022-28010

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...

CVE-2022-28011

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduledelete.php...

CVE-2022-28013

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\scheduleemployeeedit.php...

CVE-2022-28017

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimeedit.php...

CVE-2022-28014

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendanceedit.php...

CVE-2022-28007

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvancedelete.php...

CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvanceedit.php...

CVE-2022-28008

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2021-27613

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...