PT-2026-79831 · Itsourcecode · Payroll System
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
itsourcecode Payroll System version 1.0
Description
An unrestricted file upload issue exists in the
save settings() function within the admin class.php file. A remote attacker can exploit this by manipulating the img argument to upload arbitrary files to the server.Recommendations
Update itsourcecode Payroll System version 1.0 to a patched version.
As a temporary workaround, restrict access to the
save settings() function in the admin class.php file.Exploit
Fix
Improper Access Control
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Payroll System