SQL Injection Vulnerability in Attendance and Payroll System by k0xx11
CVE-2022-28011

8.8HIGH

Key Information:

Vendor: Attendance And Payroll System Project
Status: Attendance And Payroll System
Vendor: CVE Published:; 21 April 2022

🔔 Create Attendance And Payroll System Project Vulnerability Alert

What is CVE-2022-28011?

A SQL injection vulnerability has been identified in version 1.0 of the Attendance and Payroll System. This vulnerability exists in the admin component, specifically within the schedule_delete.php file. An attacker can exploit this flaw to manipulate SQL queries, which may lead to unauthorized access to the database and exposure of sensitive data. Organizations utilizing this system are advised to take immediate remedial actions to mitigate potential risks associated with this vulnerability.

References

https://github.com/k0xx11/bug_report/blob/main/bug_f/READ...

x_refsource_MISC

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 21, 2022
Vulnerability Reserved
Mar 28, 2022

CVE-2022-28011 Data

JSON