Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:payroll_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductPayroll Management System (ca3b570d-45d4-5de4-9f83-3c755c7a26d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6826 vulnerable 2026-06-08 07:43:16.505473 code-projects Payroll Management System ajax.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /Payroll_Management_System/ajax.php?action=save_department. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-28T21:00:18.376Z
Updated: 2025-06-30T15:55:04.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3134 vulnerable 2026-06-08 07:23:08.234039 code-projects Payroll Management System add_overtime.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /add_overtime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T01:31:04.817Z
Updated: 2025-04-03T13:55:20.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3039 vulnerable 2026-06-08 07:23:07.870713 code-projects Payroll Management System add_employee.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-03-31T23:00:10.116Z
Updated: 2025-04-01T03:54:09.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3038 vulnerable 2026-06-08 07:23:07.869613 code-projects Payroll Management System view_account.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-31T22:31:06.673Z
Updated: 2025-04-01T03:56:05.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2985 vulnerable 2026-06-08 07:16:58.776950 code-projects Payroll Management System update_account.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-03-31T09:00:08.985Z
Updated: 2025-03-31T16:10:34.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2984 vulnerable 2026-06-08 07:16:58.776582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2854 vulnerable 2026-06-08 07:16:58.508107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2673 vulnerable 2026-06-08 07:16:58.042533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2672 vulnerable 2026-06-08 07:16:58.041183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.