CVE-2021-44088

CriticalCVSS 9.8

Published: 17/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.90%

85th percentile - higher than 85% of all known CVEs

Summary

An SQL Injection vulnerability in Attendance and Payroll System v1.0 allows a remote attacker to bypass authentication via unsanitized login parameters.

Risk Assessment

An attacker can gain unauthorized access to the system, potentially leading to data theft, payroll manipulation, or data integrity compromise.

Recommendation

Immediately update the system to the latest version or apply a security patch, and implement input validation and parameterized SQL queries.

Original NVD description (English source)

An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters.