CVE-2022-28468

CVE-2022-28468 affects Payroll Management System v1.0 through a SQL injection vulnerability in the username parameter. Root cause: improper input handling enabling attacker-controlled SQL execution. Impact: high; CVSS‑3.1 score 9.8 (CRITICAL) with network access, no authentication, and high confi...

CVE-2024-8567

CVE-2024-8567 affects itsourcecode Payroll Management System 1.0. The vulnerability stems from the file /ajax.php?action=delete_deductions where manipulating the id parameter leads to SQL injection. It is described as high/critical with network attacker potential and remote exploitation. Several ...