PT-2026-45551 · Codeastro · Payroll System

Yangqiangfeng · Publicado 2026-06-01 · Atualizado 2026-06-01 · CVE-2026-10286

Mitre

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in CodeAstro Payroll System 1.0. This affects an unknown part of the file /home employee.php. The manipulation of the argument emp id results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-10286

Produtos afetados

Payroll System

Referências · 7

• 🔥 https://github.com/yihaofuweng/cve/issues/65 · Exploit
• https://vuldb.com/vuln/367579/cti · Nota
• https://vuldb.com/vuln/367579 · Nota
• https://vuldb.com/cve/CVE-2026-10286 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-10286 · Nota de Segurança
• https://codeastro.com · Nota
• https://vuldb.com/submit/825566 · Nota