CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10422 – SourceCodester Attendance and Payroll System overtime_add.php sql injection
https://notcve.org/view.php?id=CVE-2024-10422
A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtime_add.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/K1nako0/tmp_vuln14/blob/main/README.md https://vuldb.com/?ctiid.281963 https://vuldb.com/?id.281963 https://vuldb.com/?submit.431980 https://www.sourcecodester.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10421 – SourceCodester Attendance and Payroll System overtime_row.php sql injection
https://notcve.org/view.php?id=CVE-2024-10421
A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtime_row.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/K1nako0/tmp_vuln13/blob/main/README.md https://vuldb.com/?ctiid.281962 https://vuldb.com/?id.281962 https://vuldb.com/?submit.431979 https://www.sourcecodester.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10420 – SourceCodester Attendance and Payroll System update.php upload unrestricted upload
https://notcve.org/view.php?id=CVE-2024-10420
A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/K1nako0/tmp_vuln12/blob/main/README.md https://vuldb.com/?ctiid.281961 https://vuldb.com/?id.281961 https://vuldb.com/?submit.431949 https://www.sourcecodester.com • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28006
https://notcve.org/view.php?id=CVE-2022-28006
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0,, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\employee_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_a/README.md https://www.sourcecodester.com/php/12268/attendance-and-payroll-system-using-php.html https://www.sourcecodester.com/sites/default/files/download/oretnom23/apsystem.zip • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28007
https://notcve.org/view.php?id=CVE-2022-28007
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\cashadvance_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_b/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •