CVE-2025-2985: code-projects Payroll Management System update_account.php sql injection
A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2985?
CVE-2025-2985 is classified as a critical severity vulnerability.
How does CVE-2025-2985 affect the Payroll Management System?
CVE-2025-2985 allows for SQL injection through the manipulation of the deduction argument in the update_account.php file.
Can CVE-2025-2985 be exploited remotely?
Yes, CVE-2025-2985 can be exploited remotely.
What should I do to fix CVE-2025-2985?
To fix CVE-2025-2985, validate and sanitize inputs in the update_account.php file to prevent SQL injection.
Which software versions are affected by CVE-2025-2985?
CVE-2025-2985 affects version 1.0 of the Payroll Management System.