SQL Injection Vulnerability in Attendance and Payroll System by SourceCodester
CVE-2022-28006

8.8HIGH

Key Information:

Vendor: Attendance And Payroll System Project
Status: Attendance And Payroll System
Vendor: CVE Published:; 21 April 2022

🔔 Create Attendance And Payroll System Project Vulnerability Alert

What is CVE-2022-28006?

The Attendance and Payroll System v1.0 contains a SQL injection vulnerability in the employee deletion component located at \admin\employee_delete.php. This flaw allows an unauthorized attacker to manipulate SQL queries, potentially leading to unauthorized access to sensitive information contained within the database. Exploiting this vulnerability can compromise user data, user accounts, and overall system integrity, making it crucial for organizations to address this issue promptly.