CVE-2026-3993: itsourcecode Payroll Management System, инжекция

Описание

Оригинално описание

A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manage_employee_deductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Засегнати продукти

• itsourcecode Payroll Management System: 1.0

Вид слабост

• CWE-79 XSS
• CWE-94 Неправилен контрол при генериране на код

История

Други уязвимости в itsourcecode Payroll Management System

• 5.3CVE-2026-5319
• 7.3CVE-2026-5238
• 7.3CVE-2026-5237
• 5.3CVE-2026-4877
• 7.3CVE-2026-4223

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-3993
• https://nvd.nist.gov/vuln/detail/CVE-2026-3993
• https://vuldb.com/?id.350475
• https://vuldb.com/?ctiid.350475
• https://vuldb.com/?submit.769749
• https://github.com/ltranquility/cve_submit/issues/11
• https://itsourcecode.com/