https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-4223.htmlhttps://patchthecve.com/cve/CVE-2026-4223.htmlWed, 17 Jun 2026 10:56:15 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be https://patchthecve.com/cve/CVE-2026-3812.htmlhttps://patchthecve.com/cve/CVE-2026-3812.htmlWed, 17 Jun 2026 10:44:16 +0000MEDIUM 4.3: A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publiclhttps://patchthecve.com/cve/CVE-2025-9529.htmlhttps://patchthecve.com/cve/CVE-2025-9529.htmlWed, 17 Jun 2026 10:09:10 +0000HIGH 7.3: A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to the https://patchthecve.com/cve/CVE-2025-7220.htmlhttps://patchthecve.com/cve/CVE-2025-7220.htmlWed, 17 Jun 2026 10:04:32 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_deductions. The manipulation of the argument ID leads to sql injection. The attack can be launched remohttps://patchthecve.com/cve/CVE-2025-7219.htmlhttps://patchthecve.com/cve/CVE-2025-7219.htmlWed, 17 Jun 2026 10:04:32 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_allowances. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The explhttps://patchthecve.com/cve/CVE-2025-7218.htmlhttps://patchthecve.com/cve/CVE-2025-7218.htmlWed, 17 Jun 2026 10:04:32 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_position. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-7217.htmlhttps://patchthecve.com/cve/CVE-2025-7217.htmlWed, 17 Jun 2026 10:04:32 +0000HIGH 7.3: A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=save_position. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-7132.htmlhttps://patchthecve.com/cve/CVE-2025-7132.htmlWed, 17 Jun 2026 10:04:20 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_payroll. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exhttps://patchthecve.com/cve/CVE-2025-7131.htmlhttps://patchthecve.com/cve/CVE-2025-7131.htmlWed, 17 Jun 2026 10:04:20 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_employee_attendance. The manipulation of the argument employee_id leads to sql injection. The attack cahttps://patchthecve.com/cve/CVE-2025-7130.htmlhttps://patchthecve.com/cve/CVE-2025-7130.htmlWed, 17 Jun 2026 10:04:20 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_payroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2025-7129.htmlhttps://patchthecve.com/cve/CVE-2025-7129.htmlWed, 17 Jun 2026 10:04:20 +0000HIGH 7.3: A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_employee_attendance_single. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-7128.htmlhttps://patchthecve.com/cve/CVE-2025-7128.htmlWed, 17 Jun 2026 10:04:19 +0000HIGH 7.3: A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculate_payroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2025-6826.htmlhttps://patchthecve.com/cve/CVE-2025-6826.htmlWed, 17 Jun 2026 10:02:38 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /Payroll_Management_System/ajax.php?action=save_department. The manipulation of the argument ID leads to sql injection. Thttps://patchthecve.com/cve/CVE-2025-3134.htmlhttps://patchthecve.com/cve/CVE-2025-3134.htmlWed, 17 Jun 2026 09:19:14 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /add_overtime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been discloshttps://patchthecve.com/cve/CVE-2025-3039.htmlhttps://patchthecve.com/cve/CVE-2025-3039.htmlWed, 17 Jun 2026 09:19:04 +0000MEDIUM 6.3: A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-3038.htmlhttps://patchthecve.com/cve/CVE-2025-3038.htmlWed, 17 Jun 2026 09:19:04 +0000MEDIUM 6.3: A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may be initiated remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-2985.htmlhttps://patchthecve.com/cve/CVE-2025-2985.htmlWed, 17 Jun 2026 09:07:59 +0000MEDIUM 6.3: A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit hahttps://patchthecve.com/cve/CVE-2025-2984.htmlhttps://patchthecve.com/cve/CVE-2025-2984.htmlWed, 17 Jun 2026 09:07:58 +0000MEDIUM 6.3: A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument emp_id leads to sql injection. The attack may be launched remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2025-2854.htmlhttps://patchthecve.com/cve/CVE-2025-2854.htmlWed, 17 Jun 2026 09:07:44 +0000MEDIUM 6.3: A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file update_employee.php. The manipulation of the argument emp_type leads to sql injection. The attack can be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-2673.htmlhttps://patchthecve.com/cve/CVE-2025-2673.htmlWed, 17 Jun 2026 09:07:24 +0000LOW 3.5: A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /home_employee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-2672.htmlhttps://patchthecve.com/cve/CVE-2025-2672.htmlWed, 17 Jun 2026 09:07:24 +0000MEDIUM 6.3: A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add_deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2024-10371.htmlhttps://patchthecve.com/cve/CVE-2024-10371.htmlWed, 17 Jun 2026 06:55:30 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2024-8567.htmlhttps://patchthecve.com/cve/CVE-2024-8567.htmlWed, 17 Jun 2026 08:22:52 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_deductions. The manipulation of the argument id leads to sql injection. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2024-8081.htmlhttps://patchthecve.com/cve/CVE-2024-8081.htmlWed, 17 Jun 2026 08:21:49 +0000HIGH 7.3: A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2024-34833.htmlhttps://patchthecve.com/cve/CVE-2024-34833.htmlWed, 17 Jun 2026 07:34:08 +0000CRITICAL 9.8: Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability thttps://patchthecve.com/cve/CVE-2024-37831.htmlhttps://patchthecve.com/cve/CVE-2024-37831.htmlWed, 17 Jun 2026 07:38:54 +0000CRITICAL 9.8: Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter.https://patchthecve.com/cve/CVE-2024-5898.htmlhttps://patchthecve.com/cve/CVE-2024-5898.htmlWed, 17 Jun 2026 08:16:52 +0000MEDIUM 6.3: A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file print_payroll.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee