CVE-2025-14230: code-projects Daily Time Recording System add_payroll.php sql injection
A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown function of the file /admin/addpayroll.php. Performing manipulation of the argument detailId results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14230?
CVE-2025-14230 is considered a critical vulnerability due to its potential for remote SQL injection exploitation.
How do I fix CVE-2025-14230?
To fix CVE-2025-14230, validate and sanitize all user input, particularly the detail_Id parameter in the /admin/add_payroll.php file.
What systems are affected by CVE-2025-14230?
CVE-2025-14230 affects the Daily Time Recording System version 4.5.0 developed by Code-projects.
Can CVE-2025-14230 be exploited remotely?
Yes, CVE-2025-14230 can be exploited remotely, allowing attackers to execute SQL injection attacks.
What is SQL injection in relation to CVE-2025-14230?
SQL injection in CVE-2025-14230 occurs when an attacker manipulates the detail_Id argument to execute arbitrary SQL commands.