Description
Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Le-yan | Personnel and Salary Management System | unspecified – ≤ 2022/6/6 | — |