CVE-2024-37873

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-07-09 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in view_payslip.php in Itsourcecode Payroll Management System Project In PHP With Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

itsourcecode Payroll Management System Project In Php With Source Code: 1.0

References

https://github.com/TThuyyy/cve1/issues/2
https://github.com/TThuyyy/cve1/issues/2

Get alerted when CVE-2024-37873 or the next vulnerability affects your stack