CVE-2024-8567 - itsourcecode Payroll Management System ajax.php sql injection

Back Back to CVE browser

MEDIUM

itsourcecode Payroll Management System ajax.php sql injection

Published Sep 8, 2024

6.9

MEDIUM

CVSS 4.0

EPSS 0.70%

Description

A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_deductions. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor ITSourceCode Product Payroll Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ITSourceCode

Payroll Management System

n/a

Version	Status	Constraints
1.0	affected	-

Vendor ITSourceCode Product Payroll Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ITSourceCode

Payroll Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49271
Advisory
https://github.com/ppp-src/ha/issues/8
exploitissue-trackingIssue TrackingThird Party Advisory
https://itsourcecode.com/
product
https://vuldb.com/?ctiid.276797
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.276797
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.403998
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49271		Advisory
https://github.com/ppp-src/ha/issues/8		exploitissue-trackingIssue TrackingThird Party Advisory
https://itsourcecode.com/		product
https://vuldb.com/?ctiid.276797		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.276797		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.403998		third-party-advisoryThird Party AdvisoryVDB Entry