SQL Injection Vulnerability in SourceCodester Payroll Management System
CVE-2026-37346

4.7MEDIUM

Key Information:

Vendor

SourceCodester
Status
Payroll Management and Information System
Vendor
CVE Published:
16 April 2026

What is CVE-2026-37346?

The SourceCodester Payroll Management and Information System is susceptible to SQL injection attacks via the emp_id parameter in the view_account.php file. This vulnerability allows attackers to potentially manipulate SQL queries, leading to unauthorized access to sensitive user data stored in the system. Proper input validation and prepared statements are necessary to mitigate this risk.

References

https://github.com/mt-0505/cve-report/blob/main/sourcecod...

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.