This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-81202 | BDVDB-2026-365293 Detail

itsourcecodePayroll System

Description#

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function
  • CWE-287 Improper Authentication

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.