PT-2023-17279 · Sourcecodester · Sourcecodester Online Payroll System
CVE-2023-1847
·
Publicado
2023-04-05
·
Atualizado
2024-05-17
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Online Payroll System version 1.0
Description
A critical issue affects the processing of the file attendance.php, where the manipulation of the
employee argument leads to sql injection. The attack can be initiated remotely.Recommendations
For version 1.0, consider disabling the attendance.php file or restricting access to it until a patch is available. Avoid using the
employee argument in the affected file to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sourcecodester Online Payroll System