Platform
php
Component
cve_submit
Fixed in
1.0.1
A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Exploit Status
EPSS
0.03% (8% percentile)
CISA SSVC
Actualizar el sistema Payroll Management System a una versión parcheada que solucione la vulnerabilidad de inyección SQL. Si no hay una versión disponible, se recomienda deshabilitar o eliminar el sistema hasta que se publique una actualización segura. Además, se deben revisar y limpiar las entradas del usuario para prevenir futuros ataques de inyección SQL.
Vulnerability analysis and critical alerts directly to your inbox.
CVSS Vector
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.