CVE-2026-78201: itsourcecode Payroll System admin_class.php login sql injection
Published Aug 24, 2026
·Updated
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
itsourcecode Payroll System=1.0
Event History
Aug 24, 2026
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:21 AM
DescriptionSeverityWeakness
Jun 17, 58615
Event
via NVD·03:57 PM
Frequently Asked Questions
1
Who can exploit this issue?
The attack can be performed remotely and requires no privileges or user interaction, so any network-reachable instance of the affected application may be exposed.
2
What input is vulnerable?
The SQL injection is in the Login function of admin_class.php and is triggered through manipulation of the Username argument.
3
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.