CVE-2026-5237 in itsourcecode Payroll Management System

要約 (英語)

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

公開

2026年04月01日

エントリ

VulDB provides additional information and datapoints for this CVE:

識別子	脆弱性	CWE	悪用可	対策	CVE
354388	itsourcecode Payroll Management System Parameter manage_user.php SQLインジェクション	89	概念実証	未定義	CVE-2026-5237