Payroll Management System
CVE-2022-28468
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
AnalysisAI
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter. Affected products include: Payroll Management System Project Payroll Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
More in Payroll Management System
View allSourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Rated critical severity (CVSS 9.8), this vul
A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0.php?acti
A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Rated medium severity (C
Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter. Rat
SQL injection in Campcodes Payroll Management System 1.0 allows remote attackers to read or modify database contents via
SQL injection in Campcodes Payroll Management System 1.0 allows remote attackers to inject malicious SQL commands throug
SQL injection in Campcodes Payroll Management System 1.0 allows remote unauthenticated attackers to execute arbitrary SQ
SQL injection in Campcodes Payroll Management System 1.0 allows remote attackers to manipulate database queries via the
We need to produce a JSON with all the specified fields. Let's synthesize the data. First, extract relevant info: - CV
A weakness has been identified in Campcodes Payroll Management System 1.0. Rated medium severity (CVSS 6.9), this vulner
SQL injection in code-projects Payroll Management System 1.0 via the ID parameter in /ajax.php?action=save_department al
SQL injection in Campcodes Payroll Management System 1.0 allows remote attackers to manipulate the 'ID' parameter via /a
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today