3 results · Clear filters · Feed
-
High 7.3
itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication
A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authenti…
-
High 7.3
itsourcecode Payroll System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has be…
-
High 7.3
itsourcecode Payroll System admin_class.php login sql injection
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin_class.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The…