CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10422 – SourceCodester Attendance and Payroll System overtime_add.php sql injection
https://notcve.org/view.php?id=CVE-2024-10422
27 Oct 2024 — A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtime_add.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/K1nako0/tmp_vuln14/blob/main/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10421 – SourceCodester Attendance and Payroll System overtime_row.php sql injection
https://notcve.org/view.php?id=CVE-2024-10421
27 Oct 2024 — A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtime_row.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/K1nako0/tmp_vuln13/blob/main/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10420 – SourceCodester Attendance and Payroll System update.php upload unrestricted upload
https://notcve.org/view.php?id=CVE-2024-10420
27 Oct 2024 — A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/K1nako0/tmp_vuln12/blob/main/README.md • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28006
https://notcve.org/view.php?id=CVE-2022-28006
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0,, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\employee_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_a/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28007
https://notcve.org/view.php?id=CVE-2022-28007
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\cashadvance_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_b/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28008
https://notcve.org/view.php?id=CVE-2022-28008
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\attendance_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_c/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28009
https://notcve.org/view.php?id=CVE-2022-28009
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\attendance_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_d/README.mde • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28010
https://notcve.org/view.php?id=CVE-2022-28010
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\overtime_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_e/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28011
https://notcve.org/view.php?id=CVE-2022-28011
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\schedule_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_f/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28012
https://notcve.org/view.php?id=CVE-2022-28012
21 Apr 2022 — Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_delete.php. Se ha detectado que Attendance and Payroll System versión v1.0, contiene una vulnerabilidad de inyección SQL por medio del componente \admin\position_delete.php • https://github.com/k0xx11/bug_report/blob/main/bug_g/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •