Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:payroll_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductPayroll Management System (ed99f480-1fdc-5ff9-bfcc-6556eb9c29aa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5319 vulnerable 2026-06-08 08:07:03.551675 itsourcecode Payroll Management System navbar.php cross site scripting
MEDIUM (4.3)
A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-04-02T02:45:11.055Z
Updated: 2026-04-02T13:35:37.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5238 vulnerable 2026-06-08 08:07:03.437260 itsourcecode Payroll Management System Parameter view_employee.php sql injection
HIGH (7.3)
A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /view_employee.php of the component Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-31T23:45:10.870Z
Updated: 2026-04-01T15:52:15.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5237 vulnerable 2026-06-08 08:07:03.436908 itsourcecode Payroll Management System Parameter manage_user.php sql injection
HIGH (7.3)
A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-31T23:00:22.205Z
Updated: 2026-04-01T13:21:33.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4877 vulnerable 2026-06-08 08:07:02.577216 itsourcecode Payroll Management System index.php cross site scripting
MEDIUM (4.3)
A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-26T13:05:39.008Z
Updated: 2026-03-26T18:25:16.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4223 vulnerable 2026-06-08 08:05:13.038295 itsourcecode Payroll Management System manage_employee.php sql injection
HIGH (7.3)
A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-03-16T07:02:08.708Z
Updated: 2026-03-16T18:43:51.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3993 vulnerable 2026-06-08 08:01:19.761470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3812 vulnerable 2026-06-08 08:01:19.440560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8567 vulnerable 2026-06-08 07:00:24.960923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8081 vulnerable 2026-06-08 07:00:21.454742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5898 vulnerable 2026-06-08 06:56:17.712593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.