CVE-2026-5319: itsourcecode Payroll Management System, инжекция

Описание

Оригинално описание

A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Засегнати продукти

• itsourcecode Payroll Management System: 1.0

Вид слабост

• CWE-79 XSS
• CWE-94 Неправилен контрол при генериране на код

История

Други уязвимости в itsourcecode Payroll Management System

• 7.3CVE-2026-5238
• 7.3CVE-2026-5237
• 5.3CVE-2026-4877
• 7.3CVE-2026-4223
• 5.3CVE-2026-3993

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-5319
• https://nvd.nist.gov/vuln/detail/CVE-2026-5319
• https://vuldb.com/vuln/354651
• https://vuldb.com/vuln/354651/cti
• https://vuldb.com/submit/778613
• https://github.com/ltranquility/submit/issues/5
• https://itsourcecode.com/