PT-2026-47439 · Codeastro · Payroll System

Cshwswwsshd99 · Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-11558

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /home salary.php. The manipulation of the argument rate/salary rate leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-11558

Affected Products

Payroll System

References · 9

• 🔥 https://github.com/Andelstander/cve/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11558 · Security Note
• https://github.com/sl1der-fr0g/Findings/issues/1 · Note
• https://vuldb.com/submit/836790 · Note
• https://codeastro.com · Note
• https://vuldb.com/vuln/369168/cti · Note
• https://vuldb.com/submit/836785 · Note
• https://vuldb.com/vuln/369168 · Note
• https://vuldb.com/cve/CVE-2026-11558 · Note