CVE-2026-5237 | itsourcecode Payroll Management System 1.0 Parameter /manage_user.php ID sql injection

A vulnerability was found in itsourcecode Payroll Management System 1.0. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection.

This vulnerability is reported as CVE-2026-5237. The attack is possible to be carried out remotely. Moreover, an exploit is present.