CVE-2021-42169

CRITICAL 9.8CVE-2021-42169 · Published 22/10/2021 · updated 17/06/2026

In short

CVE-2021-42169 is a CRITICAL (CVSS 9.8) vulnerability affecting simple payroll system with dynamic tax bracket (simple payroll system with dynamic tax bracket project).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple payroll system with dynamic tax bracket simple_payroll_system_with_dynamic_tax_bracket_project	`= 1.0`	No fix yet

Description

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by: oretnom23 ) is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter (username) from the login form is not protected correctly and there is no security and escaping from malicious payloads.

References

nu11secur1ty/CVE-nu11secur1ty · Exploit
exploit-db.com/exploits/50403 · Exploit

More vulnerabilities in simple payroll system with dynamic tax bracket

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free