Vulnerabilities (CVE)

Filtered by vendor Oretnom23 Subscribe
Filtered by product Payroll Management System
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-34833 1 Oretnom23 1 Payroll Management System 2025-04-30 N/A 9.8 CRITICAL
Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server.