CVE-2026-81202: itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication
A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be performed remotely and requires no privileges or user interaction. Exploitation targets the CRUD Operation Handler in ajax.php by manipulating the action argument.
Is public exploit code available?
Yes. An exploit has been published and may be used, which increases the likelihood of attempted exploitation.
What versions are known to be affected?
The available information identifies itsourcecode Payroll System 1.0 as affected. No fixed version or workaround is provided in the supplied data.