CVE-2022-38116

CRITICAL 9.8CVE-2022-38116 · Published 30/08/2022 · updated 17/06/2026

In short

CVE-2022-38116 is a CRITICAL (CVSS 9.8) vulnerability affecting salary management system (leyan).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.5% of all vulnerabilities.
Fix: update to 2022-06-06 or later.

Package	Affected versions	Patched versions
salary management system leyan	`< 2022-06-06`	`2022-06-06`

Description

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.

References

twcert.org.tw/tw/cp-132-6460-2bb02-1.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free