CVE-2026-37347 - Vulnerability Analysis

Overview

SourceCodester Payroll Management and Information System v1.0 contains a sql injection caused by unsanitized input in /payroll/view_employee.php, letting attackers execute arbitrary SQL queries remotely, exploit requires crafted request.

Severity & Score

Impact

Attackers can execute arbitrary SQL queries, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply patches to fix SQL injection in /payroll/view_employee.php.

References

• https://github.com/mt-0505/cve-report/blob/main/sourcecodester/payroll-management-and-information-system/SQL-2.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner