Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:attendance_and_payroll_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductAttendance And Payroll System (68763fd2-3226-511b-956f-0d584aac08b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10422 vulnerable 2026-06-08 06:23:46.496322 SourceCodester Attendance and Payroll System overtime_add.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtime_add.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-27T17:31:05.110Z
Updated: 2024-10-28T13:23:01.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10421 vulnerable 2026-06-08 06:23:46.495581 SourceCodester Attendance and Payroll System overtime_row.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtime_row.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-27T17:00:07.072Z
Updated: 2024-10-28T13:21:52.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10420 vulnerable 2026-06-08 06:23:46.494127 SourceCodester Attendance and Payroll System update.php upload unrestricted upload
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Attendance and Payroll System 1.0. This affects the function upload of the file /marimar/guest/update.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-27T15:31:04.852Z
Updated: 2024-10-28T13:23:48.239Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.