CVE-2025-2985

The CVE-2025-2985 entry concerns code-projects Payroll Management System 1.0. The vulnerability affects the update_account.php logic, where manipulating the deduction parameter enables SQL injection. Exploitation is remote and can result in high-impact outcomes (confidentiality, integrity, and av...

CVE-2025-3038

The CVE-2025-3038 entry applies to code-projects Payroll Management System 1.0. The vulnerability resides in the /view_account.php handling of the salary_rate parameter, enabling SQL injection. It is described as exploitable remotely and publicly disclosed. Affected component appears to be the pa...

CVE-2025-2854

CVE-2025-2854 affects code-projects Payroll Management System v1.0. The issue is in update_employee.php where unvalidated emp_type input enables SQL injection, exploitable remotely. Multiple sources confirm a SQL injection vulnerability, with exploit publicized; some publications recommend restri...

CVE-2025-2984

Code-projects Payroll Management System 1.0 is affected by a remote SQL injection in the /delete.php script via the emp_id parameter. Root cause: improper handling/exposure of the emp_id argument leads to injection. Exploit has been disclosed publicly. Impact per sources includes confidentiality/...

CVE-2025-3039

CVE-2025-3039 corresponds to a SQL injection in Code-Projects Payroll Management System 1.0, triggered by manipulating the lname and fname arguments in an unknown function of /add_employee.php. Multiple connected sources confirm remote exploitation is possible and that other parameters may also b...

CVE-2025-2672

CVE-2025-2672 affects Code-Projects Payroll Management System 1.0. The vulnerability is a SQL injection in the file /add_deductions.php, triggered by manipulation of the bir parameter. The issue is remote-executable and has been described as critical based on vendor/NVD assessments; multiple sour...

CVE-2025-3134

CVE-2025-3134 affects Code-Projects Payroll Management System 1.0. The vulnerability is in the add_overtime.php (also referenced as /add overtime.php) where improper handling of the rate parameter allows SQL injection, enabling remote exploitation. Exploitation is disclosed publicly. Remediation ...

CVE-2025-2673

CVE-2025-2673 affects Code-Projects Payroll Management System 1.0. The vulnerability is in an unknown function of the file /home_employee.php where manipulation of the argument division leads to cross-site scripting. It is exploitable remotely, and the exploit has been disclosed publicly. Other p...