CVE:CVE-2022-28019
CNNVD:CNNVD-202204-4007
Attendance and Payroll System是oretnom23个人开发者的一个使用 PHP/MySQLi 源代码的考勤和工资系统。
Attendance and Payroll System v1.0存在安全漏洞，攻击者可通过组件 adminemployee_edit.php 进行攻击。
solution:Upgrade attendance_and_payroll_system_project attendance_and_payroll_system to a higher version than 1.0,and avoid the version 1.0